This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Configure VPN users only access to certain IPs over WAN Interface

I am trying to setup my XG firewall to allow only access to our AWS servers over the WAN connection. Any other Web traffic should use their local internet connection.

I have configured the Cisco VPN Client and currently all WAN traffic from the client is going across the VPN.

So either I want to restrict access on the VPN -> WAN to only amazonaws.com domains or I can enter all the Amazon IPs for our regions from https://ip-ranges.amazonaws.com/ip-ranges.json

I am new to the Sophos interface, so any help would be greatly appreciated.

This thread was automatically locked due to age.

Parents

0 lferrara over 9 years ago

Joshua,

you can create a Policy rule from VPN to WAN and attach a web filter. The web filter can be created under Objects > Policies > Web Filter. Clone from Deny all and when you are ready add Add new category (under the web filter) add a URL group (that can be created under Objects > Policies > Content )
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 9 years ago

Joshua,

you can create a Policy rule from VPN to WAN and attach a web filter. The web filter can be created under Objects > Policies > Web Filter. Clone from Deny all and when you are ready add Add new category (under the web filter) add a URL group (that can be created under Objects > Policies > Content )
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data