Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 28 subscribers
  • Views 1291 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disable split tunnel in IPSEC vpn profile

lara20

I'm setting up IPSEC (remote only) vpn on my XG. I already have SSL vpn setup for a group of users and working as desired. Split tunnel for SSL vpn is disabled and all traffic from remote users flow through XG as per my requirement. However with IPSEC vpn for another set of users, what I have noticed is there is no option to disable split tunnel. The IPSEC vpn users have their Internet routed locally instead of going through the XG while accessing resources on the Web. Sophos client is used for ipsec vpn and open vpn client for ssl vpn. How can I disable split tunnel for the ipsec vpn profile. Thank you 



This thread was automatically locked due to age.
  • 0

    Hi Lara20,

    Below is the option under Advanced Settings where you use to Turn on/off button to make the tunnel spilt or into full tunnel mode on IPSec VPN remote users 

    Use as default gateway Turn it on to send all traffic, including external internet requests, to the interface you specify for IPsec remote access. To allow the Sophos Connect client users to send their internet requests through Sophos Firewall, you must configure a firewall rule with the source zone set to VPN and the destination zone set to WAN.

    Turn this option off to allow access only to permitted resources within the network. For traffic outside the network, the client then connects to the internet directly.

    This setting applies to all the Allowed users and groups you specify in the General settings. If you want to turn on this option for some users and turn it off for other users, use SSL VPN (remote access).

    This might help.

    "Sophos Partner: Infrassist Technologies Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

  • +1

    Hi : Thank you for connecting with Sophos community team. For IPSec (remote access) the option is available on the UI and the below snapshot will help on the same.

    Regards,

    Vishal Ranpariya
    Technical Account Manager | Sophos Technical Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link.

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?