NAT Router Behind SSL VPN configuration

Question

Hello Community Please help on these mater would be more appreciate, 
 
 I have an ISP Router front of Sophos and SSL VPN is connected but loosing internet in client PC and not able to ping any recourse even icmp,ssh,rdp 
 what I need to enable any port in ISP router already 443 is enabled so I can access the SSL VPN URL and download the SSL VPN Client as well , 
 
 Please help ..

Raphael Alganes · Answer

Hello Sharath RAJAN , 
 The recommendations above of rfcat and Bharat J are the simplest and straightforward approach to this (and you should proceed with the implementation of this in the future) 
 While it is not yet feasible because of your secutiry reason, one work around for the ISP side - is you to request them to NAT the incoming traffic from their public facing IP/router be NATed to -> XG/S on 8443 
 Then, on XG/S side on Remote Access VPN > SSL VPN Global Settings > Override Hostname - put here the Public IP of your ISP/router then download the OVPN and check if t he ovpn configuration file> then it should contain something like "remote <public IP> 8443" where on public IP is your ISP public IP. 
 The challenge on this approach is usually the IP being leased by ISP are dynamic and changes overtime and you should update configuration should it change, so going back it would be a better approach to follow on rfcat's and Bharat J's recommendation above once it is already feasible on your end. 
 Hope this helps, Many thanks for your time and patience and thank you for choosing Sophos. 
 Cheers,