Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 957 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XGS WAN Proxy

rschuerken

Hello,

On our SG we were able to open the proxy to be used from WAN (of course using authentication)

On XGS this is not possible?

From an older entry here on the forum I can found a post like "open proxy from wan is risky and this is why WE dont allow it" ...

Yeah, maybe it is risky but we are the paying customer (well maybe not much longer...) and so I think it would be nice to let us decide.

Give a "warning - this option is not good and could lead to security risks" but at least give us the option - or is ther a way now?



This thread was automatically locked due to age.
Parents
  • 0

    SFOS does not support Basic Authentication. So how would you, if you enable it, authenticate yourself in WAN? 

    What would be the idea here? 
    You could configure your WAN as a DMZ interface, then setup a Route 0.0.0.0 to the GW of your WAN and run with this.
    But this will end up in an open Proxy for the world, as there is no real way to authenticate yourself. Most (if not all) Authentication methods on SFOS are build for using for a secure network. 

    __________________________________________________________________________________________________________________

Reply
  • 0

    SFOS does not support Basic Authentication. So how would you, if you enable it, authenticate yourself in WAN? 

    What would be the idea here? 
    You could configure your WAN as a DMZ interface, then setup a Route 0.0.0.0 to the GW of your WAN and run with this.
    But this will end up in an open Proxy for the world, as there is no real way to authenticate yourself. Most (if not all) Authentication methods on SFOS are build for using for a secure network. 

    __________________________________________________________________________________________________________________

Children
No Data
Unfiltered HTML