Any tips on how to force all traffic of laptops through VPN?

Question

Hi there, 
 
 I'm currently in the planning & acquisition stage. We're planning to go with a Sophos XG 135 and possibly Sophos Central for endpoint protection. 
 
 What I need: 
 Allow my users with laptops to connect to ethernet, wifi, hotspots, whatever they want but force all traffic through a VPN so ALL traffic goes through our headquarter where the XG 135 is located. Obviously, if a user is in the local network VPN connection should not be needed. 
 
 What I want to know: 
 How to do this and what tools / services do I need from Sophos? I'm trying to figure out how to do this without manually messing around with routing tables on the laptops and other clumsy solutions.

FloSupport · Answer

Hi Ovidiu, 
 At least on the Sophos XG policy side, you would configure your SSL VPN Remote Access Policy with the " Use as Default Gateway " option enabled. 
 Use as Default Gateway 
 
 Activate the toggle switch if you want to use this as default gateway. If activated, all traffic is forwarded to a default gateway including external Internet requests. If deactivated, the traffic uses a split mode to separate traffic for internal network segments and external Internet requests through different gateways.

However, forcing your clients/users to utilize a SSL VPN connection is another issue. This is the portion that you would need to decide and determine. 
 Regards,