Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Subscribers 29 subscribers
  • Views 568 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN fails when DNAT rule applied

Mayuresh Bhagwat

We are facing a strange issue. We have a Sophos Firewall XGS2300 running on SFOS 19.0 with a single ISP link.

Most of our users connect over SSL remote access VPN. We have a internal server that is accessed from the WAN side over ports 7070 and 1470. When we create a DNAT rule for allowing access to this server, the remote users complain of being unable to connect to VPN. Also the HTTPS access on the WAN (yes its enabled) becomes inaccessible. The access is restored as soon as the corresponding rules are deleted or disabled.

Strangely neither of the ports are in conflict with HTTPS access which is on port 443 or SSL VPN which is over 8443, still the DNAT rule simply kills both these access. Please help.



This thread was automatically locked due to age.
Parents
  • +1

    Hi Mayuresh Bhagwat

    Please check the DNAT rule and make sure under "Services" you don't have "ANY" 

    Select the Service object or add new item to add the Service to host outside.

    Thanks and Regards

    "Sophos Partner: Infrassist Technologies Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • +1

    Hi Mayuresh Bhagwat

    Please check the DNAT rule and make sure under "Services" you don't have "ANY" 

    Select the Service object or add new item to add the Service to host outside.

    Thanks and Regards

    "Sophos Partner: Infrassist Technologies Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

Children
No Data
Unfiltered HTML