• Cloud Edge Secure Access
• Welcome to SonicWall Cloud Edge!
• Prerequisites
• Installation
  • Accessing the Client Management Console
  • Installation Methods
• Networks
  • Understanding Networks
  • SDP Networks
  • Regions and Gateways
    • Adding a region
    • Adding a gateway
  • Connecting Infrastructure
    • Prerequisites
    • Site-to-Site Connections
    • IPsec Tunnel
    • WireGuard Connector
    • Connect On-Prem Resources
      • Firewalls
        • SonicWall
    • Connect Cloud Resources
      • Amazon AWS
        • AWS Virtual Gateway
        • AWS Transit Gateway
      • Alibaba Cloud
      • Microsoft Azure
      • Google Cloud Platform
      • Heroku Enterprise
      • IBM Cloud
      • Docker
• Groups and Members
  • Members
    • Inviting Members
    • Password Requirements
    • Managing Roles
  • Groups
    • Managing Groups
    • Identity Provider Groups
  • Identity Providers (IdP)
    • Integrate Identity Providers
    • Azure AD
      • Azure Active Directory (SAML 2.0)
      • Azure Active Directory
    • Google Suite
      • Google Services
      • Google Apps (SAML 2.0)
    • On-Premises Active Directory
    • SAML 2.0
      • Generic SAML
      • Active Directory Federation Services (ADFS)
      • Auth0
      • Okta
      • OneLogin
      • PingIdentity
      • JumpCloud
• Securing the Platform
  • Securing Networks
    • Segmenting Networks
    • Device Posture Check
    • Network Traffic Control
    • Firewall-as-a-Service
  • Securing User Access
    • Multi-Factor Authentication
      • MFA Authentication
      • DUO Security
    • Agent-less Access
      • Zero Trust Application
        • HTTP/HTTPS
        • RDP (Remote Desktop Protocol)
        • SSH (Secure Shell)
        • VNC (Virtual Network Computing)
      • Zero Trust Policies and Rules
    • Agent-based Access
      • SonicWall Agents
        • Downloading and Installation
      • Agents Configuration
        • User-Groups Policies
        • Managing Configurations
        • General Configurations
        • Network Configuration
        • OS-Specific Configurations
• Monitoring
  • Activity Tracking
    • Activities and Logs
    • Member Devices
  • Monitoring Dashboard
  • Integrations
    • Amazon S3
    • Azure Sentinel
    • Splunk Cloud
• Compliance
  • HIPAA
  • GDPR
  • SOC 2 Type 2
• SonicWall Support
  • About This Document

Heroku Enterprise

This article describes how you can configure a connection from your Heroku Private Services to SonicWall Cloud Edge using IPSec. This lets you connect to hosts on your private networks and vice versa. Connections are established over the public internet, but all traffic is encrypted using IPSec.

Setting up the VPN connection

After you obtain your private SonicWall Cloud Edge gateway, set up a VPN gateway for the Private Space with the following command:

* Shell 

Copy ```
heroku spaces:vpn:connect \
     --name   Network \   --ip   PUBLIC_IP_OF_YOUR_VPN_GATEWAY \   --cidrs     '10.255.248.0/21'   \   --space   SPACE  

Setting up the gateway takes a few minutes. Use the Wait command to wait for the gateway to be ready:

  * Shell 
 
Copy ```
heroku   spaces  :vpn  :wait   --space    SPACE   network  

When the gateway is ready, get the configuration with:

  * Shell 
 
Copy ```
heroku   spaces  :vpn  :info   --space    SPACE   network  

This returns a table containing all the details you need to configure SonicWall Cloud Edge. Here is an example response:

  * Text 
 
Copy ```
heroku spaces:vpn:info --space SPACE network
=== SPACE VPNs
VPN Tunnel  Customer Gateway  VPN Gateway    Pre-shared Key  Routable Subnets  IKE Version
──────────  ────────────────  ─────────────  ──────────────  ────────────────  ───────────
Tunnel 1 52.91.173.226 34.203.187.158 abcdef12345     10.0.0.0 /16 1 Tunnel 2 52.91.173.226 34.227.70.143 123456abcdef    10.0.0.0 /16 1 

Please contact us to coordinate and share the configuration above securely.