Red 60 Standard/split mode port forwarding

Question

Hello 
 i have xg 330 and in branch red 60 Standard/split 100.50.20.x 
 Tplink global IP:85.85.85.x local IP:192.168.1.1 i want to forward 3389 port to server 192.168.1.x 
 how to port forward 
 Thanks

FormerMember · Answer

Hi Ahmet Sirikligil1 , 
 Thank you for reaching out to Sophos Community. 
 Moving this thread to Sophos(XG) Firewall forum. 
 Refer to the article below to create DNAT and firewall rules. 
 https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/CreatingDNATRuleWebServer.html 
 Set 'Translated destination (DNAT)' as you server IP 192.168.1.x 
 Allowing RDP port publicly makes the server vulnerable. I would suggest using remote access VPN to access internal resources from remote locations. 
 Configure Sophos Connect client 
 Configure SSL VPN remote access