Avatar of heze54
heze54
Flag for Spain asked on

Sophos UTM and Cisco ASA 5005 NAT/routing

Hi,

Our enviroment

My LAN= 192.168.157.x

Customer LAN 2.14.224.x

My Sophos UTM has 192.168.157.70 ip and an interface with 172.16.0.3 wich is a exchange LAN created between out both LAN networks

Cisco ASA has 172.16.0.1 and some objetcs defined NAT, for example:

PC1 192.168.157.1 at ASA 172.16.0.1 and the, a rule to route traffic to 2.14....network

At my Sopho there is a SourceNAT wich translates source ip 192.168.157.1 to 172.16 network changing  to 172.16.0.1

Of course there is something wrong because  I can not  ping or telnet ports from my computer at 192.168.157.x

Any ideas?

Reagards
CiscoHardware FirewallsNetworkingSophos

Avatar of undefined
Last Comment
Frank Helk

8/22/2022 - Mon
heze54

ASKER
Hi,

Any idea?

Regards and Thanks
Bud Durland

I'm having trouble sorting out how things are connected.  You say the customer's network is on 2.14.224.X.  This looks like an internet -facing network address.  Are you trying to connect the two networks over the internet?  It appears you have an internal network fof 192.168.157.x.   Is the 172.16.X.X network the customers internal network?
heze54

ASKER
Hi,

Not...

My network is 192.168.157.x and my firewall 192.168.157.70

My customer has installed a firewall and router and it's remote network is 2.14.x.x.They use an Asa firewall  to stablish a new network between both called 172.16.x.x.
Your help has saved me hundreds of hours of internet surfing.
fblack61
Bud Durland

It sounds to me like you should set up am IPSec VPN between the Sophos UTM and the Cisco.
Pete Long

Network diagram would help m8 :)
ASKER CERTIFIED SOLUTION
heze54

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Frank Helk

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: heze54 (https:#a41216585)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

frankhelk
Experts-Exchange Cleanup Volunteer
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.