Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 8265 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Inbound VNC - WAN to LAN

Benjie Santos

Good day!

 

I initially read from https://community.sophos.com/products/xg-firewall/f/network-and-routing/10855/wan-to-lan-inbound-nat---how-to but I guess it is not applicable to Sophos XG Firewall OS v16.05.

 

My question is, how do I configure a rule to allow vnc access to my LAN from outside or WAN? Is it with Business Application Rule or Network Rule?

Do I need to tick or check the "Rewrite source address"?

 

Thank you!

 

Benjie



This thread was automatically locked due to age.
Parents
  • 0

    HI Benjie ,

    I would believe that you would need to setup VNC server and port forward the necessary ports needed for you connect your VNC server Or simply you may use SSL VPN to connect a Virtual tunnel which is more secure and is recommended.

    If you wish to use the port forward option , make sure a DNAT rule is created and forwarded to the VNC server and you may connect to other VNC clients for the same. Otherwise SSLVPN is used and do not need DNAT and can connect you to any system in LAN even by using RDP option as well.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

Reply
  • 0

    HI Benjie ,

    I would believe that you would need to setup VNC server and port forward the necessary ports needed for you connect your VNC server Or simply you may use SSL VPN to connect a Virtual tunnel which is more secure and is recommended.

    If you wish to use the port forward option , make sure a DNAT rule is created and forwarded to the VNC server and you may connect to other VNC clients for the same. Otherwise SSLVPN is used and do not need DNAT and can connect you to any system in LAN even by using RDP option as well.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

Children
No Data
Cookie Information Banner