Edit Configs SSL VPN - User Portal

Hi Gib GoDesk 

You should specify your choice of WAN link in the override hostname configuration of SSL VPN settings. That way, SSL VPN client will initiate a connection directly to that WAN link IP address.

Reference to this KBA for more information: https://community.sophos.com/kb/en-us/122769

Thank's for your time.

But this override setting only allows one IP, how do I set up a failover on connection?

Hi Gib GoDesk,

It is possible with FQDN(fully qualified domain name). You can override host name with domain name, you can point the same domain to multiple IP addresses by adding A records with the same name with different IP address for the values.

Thanks,

It's a good suggestion, but in that case I'll be distributing the load. DNS registration with more than one IP uses round robin, correct?

So I will have problem with TTL and my goal is to have a failover instead of a distribution.

I liked the idea, thanks for the suggestion. For now I will follow without override.

Hi Gib GoDesk,

No, it will not load balance the traffic. SSL Remote VPN user will connect to one IP address only at a time. 

Thanks,