Thread Info
  • State Not Answered
  • Replies 7 replies
  • Subscribers 37 subscribers
  • Views 1107 views
  • Users 0 members are here
Options
Suggested

SSLVPN routes

Stuart James

I have a firewall that has a public IP address of 22.22.22.22

When I connect via SSLVPN with FULL tunnel, the Sophos Connect client adds a static route to 22.22.22.22 through the local clients firewall/internet, but routes all OTHER traffic over the tunnel.

Is there a way I route the clients actual WAN IP over the tunnel, as I need to do a DNAT for traffic hitting the clients public IP address over internal connections only (which SSLVPN is)



Edited TAGs
[edited by: emmosophos at 5:41 PM (GMT -8) on 21 Nov 2023]
Parents
  • 0

    Hi Stuart James,

    the first part: "When I connect via SSLVPN with FULL tunnel, the Sophos Connect client adds a static route to 22.22.22.22 through the local clients firewall/internet, but routes all OTHER traffic over the tunnel." is necessary, because the traffic to the VPN-Gateway cant go through the tunnel ... like configured for all the other traffic.

    The second part: sorry, I don't understand what you're trying to achieve


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Reply
  • 0

    Hi Stuart James,

    the first part: "When I connect via SSLVPN with FULL tunnel, the Sophos Connect client adds a static route to 22.22.22.22 through the local clients firewall/internet, but routes all OTHER traffic over the tunnel." is necessary, because the traffic to the VPN-Gateway cant go through the tunnel ... like configured for all the other traffic.

    The second part: sorry, I don't understand what you're trying to achieve


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Children
Unfiltered HTML