Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Subscribers 3 subscribers
  • Views 20411 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Use UTM to UTM RED technology to replace IpSec VPN tunnel ?

LaurentCH

Hello all,

I'm new in Sophos UTM world, so I have what can be a real beginner question:

Is it a good idea to use RED technology to set-up a site-to-site tunnel between two UTM (sg-310 and sg-125) instead of setupping an IpSec VPN tunnel ?

I took a look here https://www.sophos.com/support/knowledgebase/120157.aspx and it seems to fulfill our requirements.

The particularity is the two UTM are located behind NAT Devices ( front firewall and router to traverse to reach internet).

Actually we tried to setup an IpSec VPN between the two UTM through NAT and experienced strange issue , the tunnel establishement went well but then, we had a lot "INVALID_MAJOR_VERSION" error message in the VPN debug console (like if the IKE version was different betwee the two UTM ?!?) and no trafic seemed to go throught the tunnel... so we gave up...

Now i'm wondering if using RED technology will simplify our life establishing the tunnel through NAT devices or if having NAT devices on both side can be an issue ?

Thanks in advance for your answers.

Best regards,



This thread was automatically locked due to age.
Parents
  • 0
    i use RED to RED it works perfect. You can use OSPF to distribute your routing between the 2 Firewalls. Not sure how well it works through NAT. Would probably need to forward port 3400.

    ---

    Sophos UTM 9.3 Certified Engineer

Reply
  • 0
    i use RED to RED it works perfect. You can use OSPF to distribute your routing between the 2 Firewalls. Not sure how well it works through NAT. Would probably need to forward port 3400.

    ---

    Sophos UTM 9.3 Certified Engineer

Children
No Data
Unfiltered HTML