Limit dial-up VPN users to see only 1 network

Question

Good morning, 
 
 I have a fully up to date SG 125 UTM device which manages 2 networks (lets call them Backoffice and LAN1). Each network has a dedicated interface on the UTM. 
 
 Subnets are Backoffice: 192.168.102.0/24 LAN1: 172.16.0.0/24 
 
 I have AD Authenticated SSL VPN users who dial in and connect to the Backoffice network and servers with no issue. 
 
 I need to setup VPN access for another group of users who are ONLY to be able to access the LAN1 network but I'm not sure how to go about this? Do I use the PPTP type and set the firewall rules so they can only access the LAN1 network? (I've tried this and it didn't work) 
 
 Any help or pointers would be greatly appreciated. 
 
 Thanks in advance.

Raphael Alganes · Accepted Answer

Hello Paul, 
 Good day and thanks for reaching out to Sophos Community 
 You may try to configure a SSL-VPN profile for the specific user und put under allowed networks the LAN1 network only then Uncheck the automatic firewall rule and create a seperate firewall rule under network prtection where you use the network object (LAN1 Network) and the ports that are needed. 
 Cheers,

Limit dial-up VPN users to see only 1 network

Top Replies