Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 317 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to share port TCP 443 for WAF and SSL VPN?

JohnnyInc

Hi everyone,

I see a lot comments at this forum where I can see, that sharing Port 443 TCP for WAF and SSL VPN is working.

The documentation says, that it is not possible: https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RemoteAccessVPN/IPsecSSL/SSLVPN/RAVPNSSLSettings/index.html#port-optional

So I am wondering whats right?

At the moment I've WAF active and all webservers are running fine.

With SSL VPN enabled it works fine on UDP 443, but when I change it to TCP 443 (it must be TCP 443 for compatibility reasons, so that it works on Wifis where only 443 TCP is allowed), it does not work (the ovpn config on the client was replaced).

Do I need to create an additional WAF rule that points to the SSL VPN service at the firewall when using TCP 443? I would understand that, but I don't know how to configure that.

Best regards,

Johnny



This thread was automatically locked due to age.
Parents
  • 0

    Hello Johnny, 

    Good day. Thanks for reaching out to Sophos Community, hope you are well. 

    The doc guide states there are certain conditions/restrictions for the setup and on a sample table below from the doc guide - Option1 for SSLVPN is the possible configuration/setup for your use case (as you would use TCP)

    Hope this helps. Thanks for your time and patience and thank you for choosing Sophos

    Cheers,

Reply
  • 0

    Hello Johnny, 

    Good day. Thanks for reaching out to Sophos Community, hope you are well. 

    The doc guide states there are certain conditions/restrictions for the setup and on a sample table below from the doc guide - Option1 for SSLVPN is the possible configuration/setup for your use case (as you would use TCP)

    Hope this helps. Thanks for your time and patience and thank you for choosing Sophos

    Cheers,

Children
No Data