Sophos SSL VPN not using first gateway

Question

Good Day, We have a remote SSL VPN setup for Sophos Connect clients to remote into our network when working from home. 
 We have two GWs 
 Primary GW1: IP:154.x.x.x 
 Backup GW2: IP:105.x.x.x 
 
 One user is currently experiencing issues with their ISP slowing down the traffic so we want to force them connecting to the Primary GW which is GW1 (154.x.x.x) and not use the Backup GW2 (105.x.x.x). The client's ISP traffic is being slowed down to the backup GW due to not having a peer connection directly to the client's ISP. 
 Tried to change the Provisioning file to only connect to the PrimaryGW instead but each time the user connects the VPN automatically connects to the backup GW. 
 
 Struggling to force the client to use the Primary GW. Hope this makes sense?

Mayur Makvana · Answer

Hello, 
 This is to download the configuration. It does not choose the same preference while attempting the connection. You may follow the steps provided by Vivek Jagad by binding the DNS with these public IPs and mapping it accordingly. 
 For now, you must edit the config file on end client and needs to change precedence of the gateway.

Vivek Jagad · Answer

Hi Werner Smit ,

Thank you for reaching out to the community, just wanted to know if we have defined the SSL VPN WAN Precedence?:

We may define the "Override Hostname" which will fix the connection on that defined (WAN Port) ISP IP only.

Override Hostname: This sets the SSL VPN client configuration file to use this public IP when establishing the connection.

Also, another way around for this one is DNS override hostname which resolves to the IP address of one's choice.

Sophos SSL VPN not using first gateway

Top Replies