Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 39 subscribers
  • Views 6822 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Name resolution over VPN?

Martinen

Hi Sophos Community,

I've got a XGS126 on SFOS 19.5.3 with IPsec and SSL VPN enabled. Now my client wants to use VPN to connect to certain Windows machines in the LAN over RDP using the NetBIOS names. Is there a way to do name resolution on the XGS? This is a non AD environment, no DNS server present in the local network.

Any suggestion is appreciated!

Kind regards,

Martin



This thread was automatically locked due to age.
Parents
  • 0

    Hi Martinen ,

    Thanks for reaching out to Sophos Community. 

    To confirm, Can you ping the machines but cannot resolve hostnames? Also, by mentioning "no DNS server present in the local network" means you have no DNS on both ends (local and branch)? 

    If possible, could you share your network diagram for us to better picture the setup?

    Thanks,

    Raphael Alganes
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • 0 in reply to Raphael Alganes

    Hi Raphael,

    I forgot to mention that this is remote access VPN, not site-to-site. It is set up as split-tunnel. There is only one local network, no branches. So yes, we don't have a local DNS server, name resolution is done only by public DNS servers. And yes, Ping and other services work fine as long as you know the local IPs.

    Regards,
    Martin

Reply
  • 0 in reply to Raphael Alganes

    Hi Raphael,

    I forgot to mention that this is remote access VPN, not site-to-site. It is set up as split-tunnel. There is only one local network, no branches. So yes, we don't have a local DNS server, name resolution is done only by public DNS servers. And yes, Ping and other services work fine as long as you know the local IPs.

    Regards,
    Martin

Children
Unfiltered HTML