VPN user in firewall polcies

Hi ce_Sophos

Thank you for reaching out to the community, you can create two different SSL VPN Policies to meet the requirement as per the link.

Policy will look like : 

Thanks and Regards 

Hi ce_Sophos

Thank you for reaching out to the community, you can create two different SSL VPN Policies to meet the requirement as per the link.

Policy will look like : 

Thanks and Regards 

Hi

i was asking about Sophos connect(not SSL VPN)

How many users? Seems a lot of effort for two?
ian

10 to 15 users

thank you for the numbers. So basically you are looking for a round robin dnat solution?
ian

how can i apply policies based on the VPN users. Remote VPN users login to Sophos connect client. Based on the user logged in access has to be given.

Hello there,

Thank you for contacting the Sophos Community.

You can create different files for the users, using the Sophos Connect Admin (scadmin), so basically you’ll create a different file for each user with the specific subnets you want them to access OR you could simply create different Firewall rules using the "Match Known user" option in the Firewall Rule, to allow access to specific IPs. 

Regards,

Match Known user does not work. It can't capture the user logged into sophos connect. The logviewer logs shows username blank against that firewall rule.

Hi,

has the user been created in the authentication tab?

is your aim to spread the load over each server, because I don’t think the suggested method will achieve this.

ian

Match known user will be created by the Authentication of the user via VPN. So IPsec or SSLVPN will always give the firewall the information of the user. Therefore you can build a firewall use with match known users. 

for everyone who says username is available, check this screenshot. Sophos does not captures ipsec VPN usernames, even if you enable "match known users" in firewall policy.