Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Use UTM to UTM RED technology to replace IpSec VPN tunnel ?

Hello all,

I'm new in Sophos UTM world, so I have what can be a real beginner question:

Is it a good idea to use RED technology to set-up a site-to-site tunnel between two UTM (sg-310 and sg-125) instead of setupping an IpSec VPN tunnel ?

I took a look here https://www.sophos.com/support/knowledgebase/120157.aspx and it seems to fulfill our requirements.

The particularity is the two UTM are located behind NAT Devices ( front firewall and router to traverse to reach internet).

Actually we tried to setup an IpSec VPN between the two UTM through NAT and experienced strange issue , the tunnel establishement went well but then, we had a lot "INVALID_MAJOR_VERSION" error message in the VPN debug console (like if the IKE version was different betwee the two UTM ?!?) and no trafic seemed to go throught the tunnel... so we gave up...

Now i'm wondering if using RED technology will simplify our life establishing the tunnel through NAT devices or if having NAT devices on both side can be an issue ?

Thanks in advance for your answers.

Best regards,



This thread was automatically locked due to age.
Parents
  • For future admins wanting to configure IPsec between two UTMs behind NATs, this is possible.

    I have modified my post above to include additional information.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • For future admins wanting to configure IPsec between two UTMs behind NATs, this is possible.

    I have modified my post above to include additional information.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data