Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 14 replies
  • Subscribers 30 subscribers
  • Views 59520 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN Remote Access working, "use as default gateway not"

Timothy Stewart

Hi.  I have SSL VPN working with remote access users.  I can remote to any of the machines listed in Tunnel Access - Permitted Network Resources however I cannot use my XG Firewall as a gateway.  When ever this setting is turned on, remote clients cannot access the internet.

I have made sure the #Port1 and #Port2 (LAN/WAN) were added to Tunnel Access > Permitted Network Resources and that my firewall rule is allowing Source Zone: VPN -> Destination Zone: LAN/WAN/Any

I am hoping to use my XG Firewall as a gateway for http/s internet requests when working remotely.

Thanks!



This thread was automatically locked due to age.
Parents
  • 0

    One thing we have found with both Sophos XG and Sophos SG firewalls is if the IP Network at home and work are in the same subnet, i.e. 192.168.0.1/24 or 192.168.1.1/24 the Mac Clients will not connect.  Changing the subnet at a residence does correct the issue or as indicated by many users who have been successful, they are likely using uncommon IP Subnets at work locations.

    With the Mac clients I found a successful work around using the OpenVPN Connect client and enabling the Seamless Tunnel, keep in mind this will prevent the user from accessing local resources at their location.

Reply
  • 0

    One thing we have found with both Sophos XG and Sophos SG firewalls is if the IP Network at home and work are in the same subnet, i.e. 192.168.0.1/24 or 192.168.1.1/24 the Mac Clients will not connect.  Changing the subnet at a residence does correct the issue or as indicated by many users who have been successful, they are likely using uncommon IP Subnets at work locations.

    With the Mac clients I found a successful work around using the OpenVPN Connect client and enabling the Seamless Tunnel, keep in mind this will prevent the user from accessing local resources at their location.

Children