Sophos XG - using VPN like EXPRESSVPN

I was wondering the same thing (except with using Private Internet Access) but based on some searching around and using Sophos XG, I don't think it's possible.

Not possible I'm afraid.

The workaround for me was to fire up a pfsense VM - I happen to have a server with lots of NICs - with its WAN port connected to a free port on my fiber converter and LAN port to an interface on the XG. The pfsense runs a permanent OpenVPN connection and the XG uses firewall rules to route appropriately via the VPN. Works great and because the pfsense does nothing else I get awesome throughput.

You could of course use any VPN router in place of pfsense, but be aware most off the shelf routers have lousy VPN performance.

Hope this helps

Yeah, I tried to avoid pfsense - not a big fan of it lol

I had never used it and I will not use it for anything else but for me it was a zero cost solution because I could just run it in a VM. And it sure does VPN well. From Stockholm to a U.S. server:

Of course you are SOL if you don't have 2 internet connections...

Ok, so by reading this I'm assuming you need two internet connections? Can't you use routing in pfsense to send some traffic one way and another another way?

Hi,

expressvpn is a single user VPN designed for home user devices eg PC, tablet, MacBook not enterprise firewalls.

Ian

My question was a broader one - really any openVPN provider/network

Hi,

if ti is a home use VPN no, if if is an enterprise VPN eg connect wo firewall/sites together then yes. Now this discussion was held in a previous thread on the subject and one of the Sophos support staff provided a very detailed explanation.

This is for a VPN originating from the XG, not for VPNs terminating on the XG.

Ian