VPN

Samuel,

please share a network diagram

Thanks

Samuel,

you can deploy SSL remote access with a larger netmask. /24 is not enough.

https://community.sophos.com/kb/en-us/122769

Since the branch offices are very big and several, I would suggest you to go for Sophos RED.

https://community.sophos.com/products/xg-firewall/f/hardware/84088/step-by-step-on-how-to-set-up-a-sophos-red-in-a-xg-firewall

https://www.sophos.com/en-us/medialibrary/pdfs/factsheets/sophosreddsna.pdf

RED are easy to configure and better VPN management and performances.

Regards

Thank you very much, i really appreciate.

But please will i be configuring separately for each of the branches with different subnet, and how will the remote client connect to the head office( i.e, is there any client software for connection, and if there is how do i get it).  Thanks

Samuel,

do you want that each remote site user receives a different IP address? Because using multiple SSL VPN where in each one you put different users and create a firewall rule for each user group (where source zone is not any but WAN and network is the WAN ip address of the remote site) can do the trick. But in this case, all users will pick-up the ip address from the same ip address pool.

Otherwise RADIUS can be used to lease IP addresses or static ip for L2TP VPN can be assigned to each user.

Samuel,

do you want that each remote site user receives a different IP address? Because using multiple SSL VPN where in each one you put different users and create a firewall rule for each user group (where source zone is not any but WAN and network is the WAN ip address of the remote site) can do the trick. But in this case, all users will pick-up the ip address from the same ip address pool.

Otherwise RADIUS can be used to lease IP addresses or static ip for L2TP VPN can be assigned to each user.