This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to access Sophos XG when over remote SSL VPN with static IP

I have created an ACL to allow myself access to my Sophos XG when I connect in using remote SSL VPN. It has always worked fine, but after enabling the use of a static IP, I can no longer access the sophos XG over HTTPS. I can access other devices on my network, but I cant HTTPS into the sophos xg. If I disable static IP and get a dynamic IP address, then I can access it again.

This thread was automatically locked due to age.

Top Replies

Vivek Jagad over 2 years ago in reply to TimAlbrecht +1

Hey TimAlbrecht , There is no need of creating an ACL for the VPN users, simply under the device access > for the VPN zone enable the tick for HTTPS, SSH & PING !!

0 Bharat J over 2 years ago in reply to TimAlbrecht

Hi TimAlbrecht

Yes, it is possible to access your Sophos XG firewall with static IP with ACL rule as per the below snapshot :

Source Network/host is the static IP of the remote user

The destination host can be any or Sophos XG IP

Thanks and Regards

"Sophos Partner: Infrassist Technologies Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 TimAlbrecht over 2 years ago in reply to Bharat J

The source zone you have shown is wrong. It needs to be VPN, not WAN since Im coming in over the VPN.
Cancel
Vote Up 0 Vote Down

Cancel
0 Bharat J over 2 years ago in reply to TimAlbrecht

Hi TimAlbrecht

Yes I know the Source Zone is incorrect that is another way to access your Sophos XG firewall from outside if your end user has Public static IP

As per the below document we don't have to create Local ACL for SSL VPN as it required Policy to access the internal resource

Please go through the link to meet your requirement

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNRemoteAccessSSLVPNSophosConnectClient/index.html#add-a-firewall-rule

Thanks and Regards

"Sophos Partner: Infrassist Technologies Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel