Best Practice VPN for Using as VPN Proxy

Question

Hallo, 
 
 I want to use a vpn connection that solve the following problem: I would like to be shure that all Internet traffic goes through the VPN connection. But I do not want to allow access to the internal LAN. 
 So I only want to have a VPN Proxy. 
 Is there a best practice to configure that? 
 I need to use this vpn with iPhones, Mac OS X and Windows Clients

FloSupport · Answer

Hey bene 
 Using this guide as a reference: 
 
 Sophos XG Firewall: How to configure SSL VPN remote access 
 
 However, for your setup: 
 
 Don't include your local subnet in the configuration 
 SSL VPN firewall rule will be (Source: VPN Zone - Remote SSL VPN Users to Destination: WAN zone - Any)
 
 Specify your web/application policies to be applied 
 Make sure to enable the Web Proxy ACL for your VPN zone 
 Enable masquerading to SNAT outgoing VPN traffic to your public WAN IP

Enable Use as Default Gateway option 
 Permitted network resources in your SSL VPN Policy would just include be your XG's WAN interface 
 
 See these articles for information regarding MacOS and iOS: 
 
 Sophos XG Firewall: How to configure SSL VPN for Mac OS X 
 Sophos XG Firewall: How to configure SSL VPN for iPhone or iPad 
 
 Let me know how it goes. 
 Regards,