Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 5637 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSH tunnel

RickAlderson

I am trying to set up an ssh tunnel to my Sophos UTM. 

Whilst I have the SSL VPN set up and working correctly, sometimes I would just like to fire up Putty (or similar) and tunnel a web browser over the ssh connection (i.e when I don't have admin access on the host and therefore can't install the Sophos VPN client).

I have enabled shell access, allowed all networks, and set up the OTP, and I can successfully login via ssh from a remote location.

I can't however get any web traffic to work through the connection. There is nothing obvious in the firewall logs.  Anyone know how to get this to work? 

Thanks

Rick



This thread was automatically locked due to age.
  • 0

    Hi,

    Do you have VPN to WAN firewall rule configured in UTM?

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to sachingurung

    Hi

    Not specifically - I used the automatic firewall rule option.

    I just did a quick test and the ssh tunnel seems to work correctly when the vpn is active. 

    Does UTM only load the automatic firewall rule at the time of the vpn connection, and then remove it on disconnect?  If so, all I need to do is specify a firewall rule manually?

    Thanks

    Rick

  • 0 in reply to RickAlderson

    Hi Rick,

    If you navigate through Firewall> Rule, on the right side you will get a list to select the type of firewall rule. PFA screenshot.

    These rules will be effective when required. As you have an existing configured VPN policy, please check if the automatic rule for VPN> WAN connection is created or not. If not, all you need to do is to create a manual rule.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Unfiltered HTML