How to block internet browsing and allow only one ip address to access in L2tp VPN? in XG Firewall X-stream

Hi Ali Rasool,

Thanks for reaching out, and welcome to the Sophos Community!

Is there a firewall rule VPN to WAN configured on your firewall? If you want to restrict internet access for L2TP VPN users, check if there's a VPN to WAN firewall rule and turn it off. 

You could also identify the firewall rule Id that allows internet access to VPN user by running a packet capture on the firewall. 

Check out the following KBA for more info: 

• Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI

Thanks,

Hi,

Thanks for replying I am attaching the screenshot and check that the configuration for the Firewall rule.

Hi,

Thanks for replying I am attaching the screenshot and check that the configuration for the Firewall rule.