Captive portal on branch site with RED on standard/split setup - update

Hi Sagar Ghosh ,

Thank you for reaching out to the community, the key advantage of using the standard/split is if you want to control the remote site, and have Sophos UTM control data flowing to and from the remote site to the central network. The key difference is that traffic to and from the public Internet passes through the RED to the Internet directly. And the drawback is  that the remote site now has to maintain its own perimeter security, including web filtering. You also lose visibility into the remote site's public Internet usage as this is no longer logged or reported by Sophos firewall.

Hi Sagar Ghosh ,

Thank you for reaching out to the community, the key advantage of using the standard/split is if you want to control the remote site, and have Sophos UTM control data flowing to and from the remote site to the central network. The key difference is that traffic to and from the public Internet passes through the RED to the Internet directly. And the drawback is  that the remote site now has to maintain its own perimeter security, including web filtering. You also lose visibility into the remote site's public Internet usage as this is no longer logged or reported by Sophos firewall.

So, here users are behind RED (BR) and they are connecting to SFOS XGS (HQ) through RED tunnel. They have allowed few traffic as a split network to enter the tunnel. Rest of the internet traffic will be connected directly as you mentioned. However the configured Tunnel traffic will eventually reach to XGS of HQ site.

Now we wanted to impose a captive portal for the tunnel traffic. So that users behind RED sends the traffic to Firewall through RED, and it gets authenticated first. 

Hey Sagar Ghosh ,

You can refer the  Captive portal basics, for the tunneled traffic you can not impose a captive portal, it would be feature request.

I'd recommend you reach out to your Account Manager, Sales Engineer, or Sales Representative so that they can help you raise FR request into our system. You can also log a support case so that our support representative can help link that FR to the account. 

Additionally, you can use the in-product feedback in the Sophos Firewall located in the Top Menu Bar.