How to Configure IPSec Sophos with Mikrotik

[@verisjuliano]

Everything worked out, I had two stores stopped because of a sophos that stopped! Congratulations!

[@hc66]

Thanks Bro

[@suporteseven1844]

Thank you for sharing it!! It worked out very well. Do you know how I can send all the internet traffic from the mikrotik to the firewall? I need all clients going through the web policy in the firewall. Thank you!!

[@CristhianRolon-tv7rl]

Excelente aporte, solo que en mi caso tengo problemas al hacer ping desde la red del mikrotik a la red del sophos no me conecta, pero desde el sophos al mikrotik si tengo conexion. Me podrias ayudar con eso.

[@jasonvanwyngaard4387]

What a great tutorial! Worked for me first time. What should I do if both sites have LTE failover? Do I created multiple site to site VPN connections that cater for all the eventualities?

[@hc66]

Glad to hear that Sir, I don't understand you mean, maybe you can share to email that you topology. Thanls

[@kaeyana8541]

Hi can I use this configuration when I already have intranet connection from sophos to mikrotik?? What changes do I need to make in this?

[@hc66]

Hi, This can user internet or intranet. You can try following my video. Thanks

[@JohnDoe-wi8sx]

Found the flipping back and forth and sophos1 and sophos2 options in different tabs confusing.

[@philipelima]

Perfect Video. It saved my day. Congratulations!

[@hc66]

Hi Bro Philipe, Thanks

[@yovannymenesesinformatica]

Good morning, I have followed the vdeo step by step and I get stablished the connection and I can get ping from a pc in my lan Mikrotik to a pc in lan sophos but I try get ping from my lan sophos to my lan mikrotik and dont get answer, coul you get me some recomendation?

[@hc66]

Good Afternoon, Make sure rule firewall from sophos to mikrotik and then make sure rule firewall from mikrotik to allow incoming from sophos. Thanks

[@testo3659]

Great Video. Connections established at both ends but I could not ping from either end. Pls help.

[@hc66]

Hi Bro, Did you create firewall rule from segment both IPSec? If not, try to create that rule. Thanks

[@khactoanhp]

It worked but Mikrotik can not ping IP Lan and Sophos still ping to IP Lan of Mikrotik. What's problem ? Thank you for sharing it!

[@ricardobrandao2722]

Same problem

[@vincordarkskies5076]

hi.. How to enable multiple subnet from sophos to mikrotik ? If remote tunnel from sophos has like 3 subnets and wants to allow them across to mikrotik 1 subnet network.

[@hc66]

Hi Bro, CMIIW. You add remote subnet on sophos ipsec profile. For access you can setting on firewall rule, you can allow or drop subnet to mikrotik. Below my Screenshot. drive.google.com/drive/folders/1xHHg2cohfEWdvt08rGwB6Ngugu8eVdC_?usp=sharing. Thanks

[@heze54]

Hi, I´m triying with XG 18 MR5 and RB4011 and get this error hase1 negotiation failed due to time up xxxxxxx[500]xxxxx[500] . Any idea? regards.

[@hc66]

Hi Bro, Make sure your configuration IPSec Policies in sophos and mikrotik must same and don't forget preshared key must same. Thanks

[@TriTranTrong]

This video not working with UTM Sophos 9, can you help me?

[@hc66]

Hi Bro, I never try with UTM to Mikrotik. But, I before upgrade OS UTM to XG, I tried configure with IPSec StrongSwan on Linux with UTM. I think, it's same configuration. CMIIW.

[@TriTranTrong]

@@hc66 Thanks for reply. I tried and succeeded. VPN SitetoSite Mikrotik with UTM Sophos 9.

[@hc66]

Welcome brother