How to configure the new Sophos Connect VPN in 17.5

I have the same problem it don´t works, my SSL VPN works fine.. i have make with then : 

https://community.sophos.com/kb/en-us/133109#Configuration

I can connect it after but i don´t  see any thing, no intern websites or any another website so i think it ist a problem of the dns 

Same here Seems the document is less than helpfull

Yeah, I was using that too. The docs are less than helpful on what the IDs are supposed to be. It would be nice if Sophos would give a better walkthrough, would love to use this over the SSL vpn.

Hi,

The Sophos Connect Client is in EAP. 

Here is an Guide: 

https://community.sophos.com/kb/en-us/133109

Plus this :

https://community.sophos.com/products/xg-firewall/sophos-xg-beta-programs/sfos-v17-5-early-access/f/sophos-xg-17-5-early-access/108551/using-sophos-connect-vpn-client

The current V17.5 simply renamed the old Cisco VPN tab. 

https://community.sophos.com/kb/en-us/123136

So basically everything is used like before. 

Yes this basically was sure, but is don't work! 

I have Connection to my Sophos but i don't can ping any Host!

The section that talks about an IP pool for client and is not real clear, From what I understand, and correct me if I am wrong, you assign in the pool a few address from the Firewall Local LAN network so that when you connect you can access that network. Anyway I tried it both ways, assigned it at IP from Firewall LAN and made IP address from another network and nether one allowed me to access the internal LAN.

Both times I was able to connect but could not ping or connect to any devices in the LAN, Are there firewall rules or some other configuration to is needed?

The section that talks about an IP pool for client and is not real clear, From what I understand, and correct me if I am wrong, you assign in the pool a few address from the Firewall Local LAN network so that when you connect you can access that network. Anyway I tried it both ways, assigned it at IP from Firewall LAN and made IP address from another network and nether one allowed me to access the internal LAN.

Both times I was able to connect but could not ping or connect to any devices in the LAN, Are there firewall rules or some other configuration to is needed?

I got mine working, after it was explained that it was a Cisco VPN. I assigned a random IP from the class b network. And then my firewall rules for VPN worked just fine. I am able to use the sophos client to connect my Mac to the XG. I will start rolling this out to the test group, hopefully its faster than the SSL vpn connection were currently using.

Can you post a acreenshot af the fw rule and connect client setup page?

I must be missing something out, as I cannot get any traffic through the tunnel at all, it's like it's not being routed at all.

Connection works fine, traffic counters just remain at 0 :-(

Here is my setup. 

Sophos connect tab

This is the FireWall Rule Zone VPN to my other Zones and WAN (Since its full tunnel)

I set this up on our LAB XG and didn't even need a firewall rule to allow the connect clients access to the LAN. I only have a single firewall rule, default LAN to WAN. I created a small subnet range (different from the internal LAN) within the connect client setup. I see you guys created firewall rules, is that to restrict access?

I have that rule in place to allow access to the different vlans for the SSL VPN assumed that same VPN rule was being used by Client Connect.

Thanks for this. Mine was made that way also, just with PSK, but nonetheless, the same.

Haven't had the time to fiddle with it, until today, so instaleld the new version, and boom, it all worked :-D 

Hooray and merry x-mas ;)

Have added DC as DNS IP, I can ping the DC on IP, but not resolve domains. have any of you, got internal DNS working?