topic VPN IPSEC between Checkpoint 730 and Sophos xg in Firewall and Security Management

VPN IPSEC between Checkpoint 730 and Sophos xg

Gaetano_Nicosia — Thu, 23 Jul 2020 06:15:47 GMT

Hi,

I need to create a VPN site-to-site with a remote XG Sophos.

However, I must limit access to my network; from the remote network they can only access two servers in my network, example 192.168.10.xxx and 192.168.10.yyy.

Can you suggest me a solution?

Thanks and best regards

Gaetano

Re: VPN IPSEC between Checkpoint 730 and Sophos xg

G_W_Albrecht — Thu, 23 Jul 2020 08:01:34 GMT

There is a good step-by-step guide found here: https://community.sophos.com/kb/en-us/133305

In step VPN Domain, select Manually defined. We have selected CP_LAN as the internal network behind the CP GW, CP_LAN then consists of 192.168.10.xxx and 192.168.10.yyy...

Re: VPN IPSEC between Checkpoint 730 and Sophos xg

Gaetano_Nicosia — Thu, 23 Jul 2020 08:04:46 GMT

Thank You for feedback.

Gaetano

Re: VPN IPSEC between Checkpoint 730 and Sophos xg

G_W_Albrecht — Thu, 23 Jul 2020 08:16:25 GMT

Sorry, my answer was for a GAiA GW, so all the dashboard configuration can not be used ! Just try to follow it as is possible in Embedded GAiA WebGUI...

Re: VPN IPSEC between Checkpoint 730 and Sophos xg

Gaetano_Nicosia — Thu, 23 Jul 2020 08:26:31 GMT

No problem. I had already understood that I need to adapt the tutorial to the embedded Gaia WebGui

Re: VPN IPSEC between Checkpoint 730 and Sophos xg

G_W_Albrecht — Thu, 23 Jul 2020 08:59:42 GMT

Additionally, your XG encoding domain may need to have the SMB Advanced setting VPN Site to Site global settings - Join adjacent subnets in IKE Quick Mode set to false (sk98604).

I also think that many CheckMates would appreciate a short document of how you did succeed in configuration 😉