Sophos VPN Client using web proxy

Hi Kraga,

Thanks for reaching out to the Community! 

Can you explain a bit more about "I want clients to use their internet and only to check the content through a web proxy on Sophos XG."? 

What type of VPN client are you using, and is it SSL or IPsec remote-access VPN? Is it a full or split tunnel? 

Thanks,

I m using IPsec remote-access VPN and in configuration for Sophos Connect only my local LAN is allowed. 

When is web proxy disabled for VPN users, everything is ok, they use ipsec for access to our LAN, for Internet they use local gateway.

I have firewall rule VPN-LAN, LAN-VPN. VPN-WAN

I dont want them to use internet on Sophos XG.

Hi Kraga,

What is the current firmware version on your firewall? Would it be possible for you to share the screenshot of the IPsec(remote access) > Advanced settings? You probably have a full tunnel configuration, meaning all traffic will be directed through the VPN connection.

Thanks, 

Hi Kraga,

What is the current firmware version on your firewall? Would it be possible for you to share the screenshot of the IPsec(remote access) > Advanced settings? You probably have a full tunnel configuration, meaning all traffic will be directed through the VPN connection.

Thanks, 

Hi Harsh,

My curent firmware is 18.0.4 MR-4.

Lokalna mreza is our LAN.

Hi Harsh,

Did you find out what is the problem with my configuration.

I just want to use web proxy policy for VPN users over ipsec remote access but I want users to use their local internet and gateway.

Hi Kraga,

If you want to use web proxy on the firewall over remote access VPN, you would have to use the Tunnel All(Full Tunnel) gateway type. In Tunnel All, the remote traffic will use a firewall as a gateway and not the local ISP. What you're trying to do isn't possible. 

Thanks,

It is a pity that sophos does not support this option because this way the internet link will be loaded too much by VPN users.