VPN connection for outsiders

If ISP is not blocking, how is your firewall connected? Is there an ISP router in front? Does your WAN IP-address start with:

• 10.x.y.z
• 172.[16-31].x.y
• 192.168.x.y

If so, you may need to configure port forwarding or DMZ-host from the ISP-router to the firewall first.

something like this right?

192.168.0.139 is the ip given by the isp router facing the firewall

Hello,

Take a look at the following RR ( Sophos Firewall: How To Configure SSL VPN Remote Access When Sophos Firewall is Behind a NAT Device )

And if the issue persists, take a look at the following one:

 Sophos Firewall: SSL VPN troubleshooting 

Additionally, since the IP being used in your Sophos Firewall is very common (192.168.0), I recommend you modify your Upstream device to use a different one in a different range, preferably in the 172 or 10 range. 

Otherwise, you might run into the following:

 Sophos Firewall: SSL VPN access for overlapping Home networks 

Regards,

can you please post the table headers too?

Looks like you test/change the source port too ... this wouldn't work.

here you go

Are other portforwards working? For example to the 192.168.0.240 device? Or the port 4444 or 443 to Sophos?

Not at all

Can you share with us the first 2 octets of your public IP-address (like 95.241.x.y).

You can find it by browsing to whatsmyip [dot] com

67.230

I am only able to connect to the vpn while at home. Is a NAT rule required, if yes, can you guide me on this

If those are the first 2 octets, it's not CGNAT, so usually it should be possible to reach the router and with port forwards the firewall.

Since you send port 443 to Sophos, have you enabled Administration -> Device Access -> VPN portal for WAN zone? If so, by visiting https://<67.230.x.y> you should see the VPN-portal.

However if nothing is working, you might wanna check your ISP if they are blocking anything especially if none of the port forwards are functioning.

If those are the first 2 octets, it's not CGNAT, so usually it should be possible to reach the router and with port forwards the firewall.

Since you send port 443 to Sophos, have you enabled Administration -> Device Access -> VPN portal for WAN zone? If so, by visiting https://<67.230.x.y> you should see the VPN-portal.

However if nothing is working, you might wanna check your ISP if they are blocking anything especially if none of the port forwards are functioning.

See the below 


I found an option in the isp modem for wan blocking but i unchecked it and still the same

I don't know what else you could check. If you just disabled WAN Blocking, try rebooting the ISP modem and see if that makes a difference. If not, you should ask your ISP whether they are blocking incoming traffic to your public IP.