topic Re: How to Setup VAN Tunnel Between Checkpoint Quantum 1600 NEW and Sophos XG115 in Spark Firewall (SMB)

How to Setup VAN Tunnel Between Checkpoint Quantum 1600 NEW and Sophos XG115

Yogeshmangate — Thu, 11 Jan 2024 06:14:52 GMT

We required to setup VPN tunnel from existing Sophos Firewall bearing Model XG115 (SFOS 19.5.3 MR-3-Build652) to Checkpoint Firewall Quantum Spark 1600 NGFW R81.10.07

The issue is Tunnel is UP but only default subnet is accessible another doesn't up.

Re: How to Setup VAN Tunnel Between Checkpoint Quantum 1600 NEW and Sophos XG115

PhoneBoy — Fri, 12 Jan 2024 00:40:28 GMT

In order to advise, we'd need a network diagram showing both gateways and the networks behind them with IP addresses (can be fake).
Based on the description, I suspect there is a configuration mismatch.
Screenshots of relevant configurations you've already done will help.

Re: How to Setup VAN Tunnel Between Checkpoint Quantum 1600 NEW and Sophos XG115

Yogeshmangate — Sat, 13 Jan 2024 05:36:49 GMT

Thanks for valuable reply and timely help.

We did Site to Site VPN from HO side (Checkpoint 1600 NGFW) to Sophos BO Firewall Sophos XG115 (SFOS 19.5.3 MR-3-Build652).

The VPN Tunnel showing up and resources of remote side is accessible from only one subnet i.e., 10.70.1.0

Another subnets like 10.70.2.0, 10.70.3.0, 10.70.4.0, 10.70.5.0 cant able to ping or access remote resources.

Please go through herewith attached Network Diagram and help & oblige.

Your response and early action in this matter will be highly appreciated.

Waiting for your reply...

Re: How to Setup VAN Tunnel Between Checkpoint Quantum 1600 NEW and Sophos XG115

PhoneBoy — Wed, 17 Jan 2024 05:08:17 GMT

Did you look at: https://support.checkpoint.com/results/sk/sk53980
How precisely is the encryption domains defined on both ends?
Be as specific as possible, with screenshots if necessary.