DNS over SSL VPN

All of that works fine. I firmly believe it is on the sophos ssl vpn client itself....either because of a bad setting in the ovpn generated by the XG and packaged with their vpn client download OR because of a weakness/defect in the Sophos SSL vpn client itself.

This is a VERY specific issue - and apparently not the one you previously experienced.

I'll harass support.

Thanks for trying!

I'm experiencing the same issue.  What 'other client' did you use?

Viscosity. Great client, multi-platform, and relatively inexpensive.

I wish Sophos would license it.  It kicks butt. 

Did you ever get this working? I figured mine out.  I had to do the following:

Administration > Device Access > Turn on VPN DNS check box

VPN > Show VPN Settings > Set IPv4 DNS to local address (192.168.xxx.xxx) and domain name to internal DNS name

VPN > SSL VPN > Permitted Network Resources (IPv4) > Add internal network object

Firewall > add VPN to LAN access

That should do it... If you want to access external internet through the VPN add: VPN (as source with LAN) to WAN to the default policy

We were having problems with DNS on MacOS clients (tunnelblick).  Windows clients (downloaded from the portal) worked fine.

MacOS clients were randomly working.

We had 2 DNS server entries.  Primary as our internal DNS and secondary as public one.

It appears either the MacOS (I suspect) or the vpn client randomly chooses which DNS to try and doesn't roll over.

Changed both DNS servers to internal and backup internal (they forward anyway) and all DNS problems went away.

I did not have to have the DNS checkbox on.  I did not need to set the domain name.

ymmv

We were having problems with DNS on MacOS clients (tunnelblick).  Windows clients (downloaded from the portal) worked fine.

MacOS clients were randomly working.

We had 2 DNS server entries.  Primary as our internal DNS and secondary as public one.

It appears either the MacOS (I suspect) or the vpn client randomly chooses which DNS to try and doesn't roll over.

Changed both DNS servers to internal and backup internal (they forward anyway) and all DNS problems went away.

I did not have to have the DNS checkbox on.  I did not need to set the domain name.

ymmv