Firewall rules for foreign VPN

Question

Hello, 
 
 I am running a dedicated VPN server to test Wireguard. 
 My current network for this looks like: 
 [Sophos XG] === 192.168.12.0/24 === [VPN Server] === 192.168.80.0/24 [VPN Devices] 
 
 My general firewall usually consists of LAN/VPN Allow/Deny Any - but I am not sure how to add my Wireguard network to the VPN list. 
 Is there a way to do this? 
 
 Or is Sophos using the rules which are valid for my 192.168.12.0 subnet? 
 
 Thanks, 
 Mathias

lferrara · Answer

Mathis, 
 you cannot add a network inside VPN zone. 
 You can apply filter rules based on source/destination network in this case. By default, networks transported by the VPN, are automatically in the VPN zone. You will not see them, but they are in. 
 Of course, if you have multiple VPNs, all remote networks will be in the VPN zone but to QoS or filter the traffic, use source/destination. 
 Regards