Sophos XGS time based VPN

Question

Hallo, 
 how is it possible to control the IPSEC Remote VPN Access time-based on the XGS, so that the users can only establish a connection at certain times? 
 
 Thank You!

Srisakthi S · Answer

IPsec Remote Access VPN supports Idle timeout where SFOS disconnects idle client tunnels after the specified time. Whenever traffic activity resumes on this tunnel, the tunnel re-establishes automatically.

JasP · Answer

To add a bit more detail to what Erick Jan and LuCar Toni said, see these screenshots for how we do it. 
 Rather than 'allowing' at certain times, we find it easier to add a timed block as the top/first firewall rule. This is easier than adding timed 'allows' for every firewall rule (if you have more than one) and reduces the chances of errors if you ever need to make changes. 
 We are using 'Match known users' because some people are allowed access at any time so we just block certain people outside work hours. 
 The effect of this rule is to block the named users at the 'VPN Access Block' scheduled times. If you want to block everybody at certain times, just don't use 'Match known users'.

Erick Jan · Answer

Hi, 
 Thank you for reaching out to Sophos Community. 
 On the VPN Firewall Rule Allow Rule, have you tried to configure the "during scheduled time" ?

During scheduled time 
 Select a schedule or create one. Sophos Firewall matches the rule criteria during the time period and day of the week that you select.

For more reference, kindly check the following 
 Select the source matching criteria .

Sophos XGS time based VPN

Top Replies