Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
726 questions
Can't connect site-to-site VPN
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 50%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Tom Smith
0
Reputation points
I have a Sophos firewall that I can't connect to the Azure Remote gateway
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 36%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGS%3C/text%3E%3C/svg%3E)
G Sree Vidya 175 Reputation points Microsoft External Staff2025-03-04T06:00:21.6366667+00:00 Hello Tom Smith
Greetings!
Welcome to the Microsoft Q&A Platform! Thank you for reaching out with your question.
Please review the following details to check the site-to-site connectivity:
- VPN Tunnel Connection Status: Verify the VPN tunnel connection status on your Sophos firewall.
- Validate the VPN Device: Use the following document to validate your VPN device: VPN Device Documentation.
- Pre-shared Key: Compare the shared key for the on-premises VPN device with the Azure Virtual Network VPN to ensure they match.
- IKE Version: Confirm that both Sophos and Azure are using compatible IKE versions (usually IKEv2).
- VPN Peer IPs and VPN types: Verify the VPN peer IPs and (rout based/policy based.
Additionally, you can re-check the configuration from the Azure side using this guide:
Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal.
After validating the above points, we suggest resetting the VPN gateway:
- In the portal, go to the virtual network gateway that you want to reset.
- On the Virtual Network Gateway page, in the left pane, scroll and locate Help -> Reset.
- On the Reset page, select Reset. After the command is issued, the current active instance of the Azure VPN gateway will reboot immediately.
Let me know if the above steps help. Otherwise, please provide the error details for further investigation.
Please feel free to reach out if you have any further questions. I’m happy to assist you!
Sign in to comment
Sign in to answer