Follow this guide if Pronto still works fine, but printing is no longer working.


This will mean that the 4G/5G modem at Eastern Creek has most likely changed public IP, which causes the IPSec tunnel from Eastern Creek Sophos firewall to Azure to drop.

To confirm this is the case,

Login to Eastern Creek Sophos Firewall from within ParagonCare network (must be connecting from 10.10.10.0/24 range)


Eastern Creek Sophos Firewall: https://192.168.50.254:4444/

Username and password in 1Password


Once logged in, head to Site-to-Site VPN from the left.
You should see a red dot on the connection column for 'Pronto Azure 20250604'

Head to Azure portal and login with Surgical Specialties IT Support account (Details in 1Password).

Search for Connections


Click 'VPN Connections' on the left and find 'SS_Eastern_Creek' from the list which should say 'Not Connected'


If this is the case for both Sophos Firewall and Azure then the 4G/5G modem onsite at Eastern Creek has changed Public IP.


To fix follow these steps:

1. Login to a machine onsite in Eastern Creek kit room via Atera PowerShell (Run as system)
Machines to try:
Rahil Vohra - 03972-NB
Supun Piyadarashana - 04522-NB
Siotame Ofahengaue - 04974-NB

2. Run the following PowerShell command: (Invoke-WebRequest ifconfig.me/ip).Content
3. Copy the IP Address that displays in the PowerShell console window (This is the new Public IP of the 4G/5G modem)

4. In Eastern Creek Sophos Firewall Site-to-Site VPN, scroll to the right and press the pencil icon to edit 'Pronto Azure 20250604'

5. In Local ID textbox under Gateway settings, paste the new Public IP

6. Press Save button at the bottom
7. In Azure Portal under Connections > VPN Gateway > Local network gateways, click on 'SS_Eastern_Creek'
8. Head to Settings > Configuration, paste the new Public IP in the IP Address textbox

9. Press Save just above

10. Head back to Eastern Creek Sophos Firewall and the connection dot for 'Pronto Azure 20250604' should now be green
11. Head to Azure Portal > Connections > VPN Gatway > VPN connections, and click on 'SS_Eastern_Creek', Status in overview page should now say 'Connected'