General Discussion SSL VPN remote access client isolation.

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 5 replies
Subscribers 6 subscribers
Views 2203 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN remote access client isolation.

Agris over 3 years ago

When our company's users use SSL VPN remote access (Sophos UTM 9), customers are not isolated from each other.

We do not have such allow rule.

Can they be Isolated?

This thread was automatically locked due to age.

Parents

0 BAlfson over 3 years ago

Sveiki and welcome to the TM Community!

Have you tried a firewall rule like 'VPN Pool (SSL) -> Any -> VPN Pool (SSL) : Drop'? Did that solve the problem?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Agris over 3 years ago in reply to BAlfson

This rule does not solve the problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Agris

Are you sure that there's not another rule allowing the traffic above the suggested one? If you have 'Automatic firewall rules' selected in the SSL VPN Profile, that creates a rule above all of the manually-created rules. Please insert a picture of the Edit of the SSL VPN Profile.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Agris over 3 years ago in reply to BAlfson

I do not find such a rule that allows VPN Pool (ssl) -> Any -> VPN Pool (ssl).
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Agris over 3 years ago in reply to BAlfson

I do not find such a rule that allows VPN Pool (ssl) -> Any -> VPN Pool (ssl).
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 3 years ago in reply to Agris

Yeah, I can't see why the Drop rule wouldn't work. Please let us know what you learn from Sophos Support.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel