LAN To WAN VPN Problem

Hi Memorycard, 

I would recommend you to start using  SSL VPN with Sophos Connect client to connect the remote user,

For configuration below is the link for the same : 

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNRemoteAccessSSLVPNSophosConnectClient/index.html#create-a-user-group-and-add-a-user 

Thanks and Regards

Hello Bharat,

Thanks for replying.

Our users (Internal users) want to connect to the outside vpn server (non-sohphos servers). 

So, it is a LAN to WAN rule with enabled NAT on it. 

Imagine computer A within LAN is going to connect to a RRAS server in England. 

The point: Sophos is placed at the edge of network and is responsible for internet NATting (like a DSL modem we all have in the house)

Hello there,

Try running the following command from the Console of the XG (5>4)

console> set ips ac_atp exception fwrules 1,2

Where 1,2 is the Firewall Rules where you want to disable this, in your case it would be your specific LAN to WAN for the VPNs

Regards,

Hello there,

Try running the following command from the Console of the XG (5>4)

console> set ips ac_atp exception fwrules 1,2

Where 1,2 is the Firewall Rules where you want to disable this, in your case it would be your specific LAN to WAN for the VPNs

Regards,