This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

S2S and internet proxy

Hi Everyone,

I am looking at setting up two Sophos UTM9 servers in a site to site config and wondered if it was possible to proxy the internet out of one site into the other site.

Here is an example of what I am trying to achieve....

Site A (10.0.100.x) Site B (10.0.200.x)

Proxy all internet traffic from site A over to site B. All users of site B dont need to know that the internet is coming from the other site. All remote vpn users at site B also need to just work as is.

Does this need to be a parent proxy and then some kind of local proxy or can it all be configured as one proxy????

D

This thread was automatically locked due to age.

0 BAlfson over 12 years ago

Hi, and welcome to the User BB!

I have some clients that use this approach to avoid having to pay for a Web Protection subscription at their other locations.

In the site running Web Protection (site A), add "Internet" to 'Local networks' in the IPsec Connection definition and 10.0.200.x to 'Allowed networks' in Web Filtering. Be sure to add a masquerading rule for 10.0.200.x and to add that subnet to the appropriate Firewall rules.

In site B, use just "Any" in 'Remote networks' in the Remote Gateway. Select 'Automatic firewall rules' in the IPsec Connection. The installation wizard probably created masquerading and firewall rules that could be deleted or disabled.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

S2S and internet proxy

Submitted a Tech Support Case lately from the Support Portal?