VPN IPSec Policy

Hi B.R.O.

Have a look at this document: https://community.sophos.com/kb/de-de/117624

Maybe it helps.

CS

Is is going to mess up my vpn ipsec policies if I change the IP address of the UTM after creating all of them?

I have the UTM on my network so I can see the old firewall and the UTM side by side to copy firewall settings to the UTM.

B.R.O. said:

Is is going to mess up my vpn ipsec policies if I change the IP address of the UTM after creating all of them?

I have the UTM on my network so I can see the old firewall and the UTM side by side to copy firewall settings to the UTM.

 

No, it's no problem. Interface IP is only an attribute of the interface object. If you change the object, all relations (like IPSec) are still active.

You should not delete and re-create it!

I totally understand!  When I was working on the XG, I tried bridging the WAN and that had the same effect of deleting and re-creating the interface which wiped out all my vpn policies.  I am glad it will be no problem.