Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 38 subscribers
  • Views 604 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Question regarding #Port and ##ALL_RW special IP hosts

Wayne Folta

Looking at IP Hosts like #Port2 or ##ALL_RW, they are dynamic IP addresses, correct? So if Port2 is my WAN port and the ISP changes my IP (via DHCP), wherever #Port2 is used in any rule will automatically be updated instantly so that the rule still applies, correct?

The Help documentation doesn't mention the single-# names in particular. However, it does mention the souble-# names, like ##ALL_RW and say that the IP list updates "when they're established with the Sophos Connect client.". Does this mean that if I use an OpenVPN client, it will NOT be added to ##ALL_RW, or is the "with the Sophos Connect client" just slightly outdated and really means "VPN client"?



This thread was automatically locked due to age.
Parents
  • 0

    hi  

    ##ALL_RW, this is the superset hostname, will be dynamically updated with virutal ip pool (for SSLVPN RA and IPsec RA) configured, when used in the firewall rule in 'source networks', packets from remote clients is allowed into the SFOS; works with any VPN remote access (RA) client.

    ##ALL_SSLVPN_RW - this is for SSLVPN RA virtual ip pool (configured in SSLVPN global settings)

    ##ALL_IPSEC_RW - this is for IPsc RA virtual ip pool (configured in IPsec RA - 'Assign IP from')

    I guess you are right on your observation regarding #PortX, specifically in cases like dnat or port forward or business app rules etc..

Reply
  • 0

    hi  

    ##ALL_RW, this is the superset hostname, will be dynamically updated with virutal ip pool (for SSLVPN RA and IPsec RA) configured, when used in the firewall rule in 'source networks', packets from remote clients is allowed into the SFOS; works with any VPN remote access (RA) client.

    ##ALL_SSLVPN_RW - this is for SSLVPN RA virtual ip pool (configured in SSLVPN global settings)

    ##ALL_IPSEC_RW - this is for IPsc RA virtual ip pool (configured in IPsec RA - 'Assign IP from')

    I guess you are right on your observation regarding #PortX, specifically in cases like dnat or port forward or business app rules etc..

Children
No Data
Unfiltered HTML