Connect from guest network to VPN

Question

I have a new xgs ( SFOS 20.0.0 ) and would like for the guest wifi users to be able to connect to our vpn. How can I achive that?

Erick Jan · Accepted Answer

Hi, 
 Thank you for reaching out to Sophos Community. 
 To verify, What kind of VPN are you referring? Remote(IPsec/SSL)/Site-to-site? 
 Also, for safety concerns and consideration, the purpose of the guest networks is to separate unknown/unsecured devices from the internal network. Providing VPN access to guest users involves security risks. 
 You may create a VPN policy/add to permitted network resources, allow Wifi to VPN on device access, and create a separate Firewall Rule for the guest network. 
 For more information, refer to the following link. You can also check the Sophos Assistance to guide you. 
 
 https://techvids.sophos.com/watch/F6J2svQYYBxvpCDnjhY8JA

Mayur Makvana · Answer

Hello, 
 I am considering that you may be using the Sophos AP/APX devices in the network. You may create the separate zone with the new SSID and your guest users can connect to that network. 
 docs.sophos.com/.../index.html

Wayne Folta · Answer

I think this would involve a DNAT loopback rule from your Guest network to your public IP? Not sure if additional permissions would be necessary or if the XSG considers a loopback to essentially come from the internet. (Which is your goal.)

Connect from guest network to VPN

Top Replies