Good morning everyone,
on sophos XGS I configured the client-site SSL VPN, everything works except the resolution of internal names, probably because our internal windows domain has the same name as a public domain that is not ours (I know it's a bad configuration but that's how I found it), so the client that connects in VPN can't resolve the names of the internal servers.
By downloading the .ovpn profile from the User Portal and modifying it by adding the following parameters, the internal resolution also works:
dhcp-option DNS 192.168.0.251
dhcp-option DNS 192.168.0.248
register-dns
block-outside-dns
it is possible to ensure that the OVPN profile that is downloaded from the user portal already contains these commands, or another way to solve the problem.
Hi Luc,
Thank you for reaching out to Sophos Community.
Once set on the SSL VPN Global Setting, the DNS set will be the one configured on the .ovpn that can be downloaded on the User portal. However, the issue is your internal Windows domain has the same name as a public domain, which will cause the resolution to be confused.
Another way is to send the edited OVPN manually to the users and advise them to use the following configuration.
Erick Jan
Global Community Engineer, Support & Services
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.
The award-winning home for Sophos Support videos! - Visit Sophos Techvids
Hi Luc,
As a workaround what we can do is the following.
1. Let the user download the .ovpn for authentication, then send it to administrator.
2. Administrator will edit and input the DNS config,then send back to User.
Erick Jan
Global Community Engineer, Support & Services
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.
The award-winning home for Sophos Support videos! - Visit Sophos Techvids