VPN connection for outsiders

If ISP is not blocking, how is your firewall connected? Is there an ISP router in front? Does your WAN IP-address start with:

• 10.x.y.z
• 172.[16-31].x.y
• 192.168.x.y

If so, you may need to configure port forwarding or DMZ-host from the ISP-router to the firewall first.

something like this right?

192.168.0.139 is the ip given by the isp router facing the firewall

can you please post the table headers too?

Looks like you test/change the source port too ... this wouldn't work.

here you go

Are other portforwards working? For example to the 192.168.0.240 device? Or the port 4444 or 443 to Sophos?

Not at all

Can you share with us the first 2 octets of your public IP-address (like 95.241.x.y).

You can find it by browsing to whatsmyip [dot] com

67.230

I am only able to connect to the vpn while at home. Is a NAT rule required, if yes, can you guide me on this

If those are the first 2 octets, it's not CGNAT, so usually it should be possible to reach the router and with port forwards the firewall.

Since you send port 443 to Sophos, have you enabled Administration -> Device Access -> VPN portal for WAN zone? If so, by visiting https://<67.230.x.y> you should see the VPN-portal.

However if nothing is working, you might wanna check your ISP if they are blocking anything especially if none of the port forwards are functioning.

See the below 


I found an option in the isp modem for wan blocking but i unchecked it and still the same

I don't know what else you could check. If you just disabled WAN Blocking, try rebooting the ISP modem and see if that makes a difference. If not, you should ask your ISP whether they are blocking incoming traffic to your public IP.

I don't know what else you could check. If you just disabled WAN Blocking, try rebooting the ISP modem and see if that makes a difference. If not, you should ask your ISP whether they are blocking incoming traffic to your public IP.