Remote SSL VPN. Modify downlodable .OVPN adding custom command.

Hi Luc,

Thank you for reaching out to Sophos Community.

Once set on the SSL VPN Global Setting, the DNS set will be the one configured on the .ovpn that can be downloaded on the User portal. However, the issue is your internal Windows domain has the same name as a public domain, which will cause the resolution to be confused. 

Another way is to send the edited OVPN manually to the users and advise them to use the following configuration.

I can't send an already modified ovpn profile, from what I've seen every ovpn profile has its own private key

Hi Luc,

As a workaround what we can do is the following.

1. Let the user download the .ovpn for authentication, then send it to administrator.

2. Administrator will edit and input the DNS config,then send back to User.

Having the same situation - when using OpenVPN Client with the ovpn file. Need to add the block-outside-dns.

Using Connect Client works but in some situations, it is not possible to use Connect Client.

certainly that's what I do and for now it's the only solution. But it's something uncomfortable.
But I think it is useful to give the possibility to configure the OVPN profiles that are generated in a more granular way.