Sophos Home Firewall - Work VPN connects, applications don't work

Hi Chris,

Thank you for reaching out to Sophos Community.

Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue?

• To verify, what kind of remote VPN are you using? And what firmware version are you using?
• Were the Firewall Rules on the very top?
• I would recommend doing a Packet Capture to check.
• From the logs, is there traffic coming from the respected IP?

For more reference, kindly check the KB which might assist you

Sophos Firewall: Troubleshoot SSL VPN remote access connectivity and data transfer issues

Hi Chris,

Thank you for reaching out to Sophos Community.

Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue?

• To verify, what kind of remote VPN are you using? And what firmware version are you using?
• Were the Firewall Rules on the very top?
• I would recommend doing a Packet Capture to check.
• From the logs, is there traffic coming from the respected IP?

For more reference, kindly check the KB which might assist you

Sophos Firewall: Troubleshoot SSL VPN remote access connectivity and data transfer issues

I have been through the documentation and it looks to be for VPN provided by the Sophos, rather then an external VPN that is traversing through the sophos.

Is there a way i can add the mac address or IP to the rules engine so it will completely bypass the firewall? Any inbound or outbound traffic will be let through?

Hello, 

Can you share a screenshot of the VPN client you are using?

You can add the following exception to the firewall rule that controls the traffic going out when the VPN is connected 

Sign in to the CLI using Telnet or SSH. The CLI can also be accessed in the WebAdmin by going to Admin > Console located in the upper right corner.

Choose option 4. Device Console.

Execute the following command:

console> set ips ac_atp exception fwrules 1,2

Where 1,2 is the Firewall rule you want to bypass. 

However, before doing this, I would recommend you confirm what VPN you are using, as this sounds more like a missing route in the Configuration File of the VPN  to reach the devices. ^EO

Thanks Emmanuel, I tried that but unfortunately it still didn't work. 

It looks like the Citrix Receiver is not able to see the remote server, something in the sophos firewall is blocking it, however i don't get any denied traffic in the logs for that IP address. 

I don't have web filtering on and i will turn off IPS and test again to see if that has an impact. Could it be something to do with DNS?  All other traffic and applications are fine, just anything that uses the citrix reciever. 

Thanks 

Hi,

more than likely one of the applications/web pages does not like https decryption. If this is the case the failure does not show in the logs only by the application not running correctly on your desktop.

Ian

Hello Chris,

You would need to ask for a packet capture when trying to access the resources to see if the traffic is getting to them in the first place.

Can you show us the rule that you have configured for this traffic?

Regards,