You also have extra functionality and security options when using the Sophos XG instance to handle VPN traffic (IPS, strict firewall rules, packet inspection, etc).
Instead of paying for 2 resources (Sophos XG and Microsoft VPN Gateway), you can consolidate and use one for both. Numerous companies and organizations are using Sophos XG instances on Azure to protect their internet facing workloads already. Microsoft Azure has a VPN gateway appliance which can handle the Azure side of the VPN connection, however this is a resource that costs money (instance time and instance data transfer) and has limited configuration options.Why are we using a Sophos XG Appliance/Instance to handle the VPN on Microsoft Azure, instead of using the Microsoft branded Azure VPN Gateway?.There is a need to have these different products co-exist and function together, like in this specific example. Numerous companies and organizations are still using the Sophos UTM product for their on-premise IT infrastructure. Sophos only supports deployment of the Sophos XG on Microsoft Azure.Why are we using both (2) products, Sophos XG and Sophos UTM for the connection instead of using the same product on each end?.Let’s ask some key questions and get some answers: You may need to revert these steps if connectivity is lost to restore access to your environment. An assumption is made that you are skillful enough to know what tasks you are performing and what result they may have on your own environment.
WARNING AND DISCLAIMER: Following the steps in this document if done incorrectly or if your environment is different from the one used in this example, can cause network connectivity issues or a loss of connectivity. To learn how to deploy Sophos XG in Microsoft Azure, please read this post. This type of connection and configuration is standard for corporations, businesses, and organizations who have workloads on Microsoft Azure and need to connect their Azure environment to their corporate LAN. Furthermore we are doing this to connect a Microsoft Azure Virtual Network (using a Sophos XG instance) to an On-Premise LAN (running a Sophos UTM). Today I’m going to be talking about connecting a Sophos XG firewall to a Sophos UTM firewall for a site-to-site VPN connection specifically using SSL tunneling.
0 kommentar(er)
