This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM VPN Client / vpn privacy connect Sophos -> Internet

Hey all,

I have set up my utm a while and I am very happy with it. To anonymise my traffic I often use an outside hosted vpn serve on my Mac. Do you know if there is the possibility to let the Sophos connect to the vpn service - ideally via ikev2? I would very much like to avoid going around my firewall using vpn services tunnelling through it.

Thank you very much for your thoughts

BR
Paul

This thread was automatically locked due to age.

0 LuCar Toni over 5 years ago

XG and UTM has no IKEv2 RAS Support right now.

You could use SSLVPN or IPsec. It is up to you.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Paolo over 5 years ago in reply to LuCar Toni

thanks a lot. do you have a manual how to set up an IPsec connection on the utm?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Paolo

There are two Guide for it.

https://community.sophos.com/kb/en-us/116032

But be careful : Sophos does not offer a IPsec Client (Right now).

There is a Beta / Early access program for the new Sophos Connect client. This is the first free IPsec Client for XG/UTM.

https://community.sophos.com/products/xg-firewall/sophos-xg-beta-programs/sfos-v17-5-early-access/f/sophos-xg-17-5-early-access/108551/using-sophos-connect-vpn-client

Seems like you need a XG for getting a hand on this client. Or you ask somebody here to send you the Client. I cannot send you this client :(

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to LuCar Toni

Toni, I think he wants to use an anonymizing proxy like NordVPN or IPvanish and connect the UTM to it directly, and that's not possible. Many here have tried to import an OpenVPN client configuration to accomplish what he wants, but I know of no one that has succeeded. The best workaround I know of is a separate box that handles all traffic through such a tunnel.

The net of it is that the Sophos tools are for professional use and have not been adapted to home use like some home routers.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Paolo over 5 years ago in reply to BAlfson

Thanks a lot for your grass support!

I am also thinking if a separate box that's between the internet-gateway-router and the firewall that is only handling the vpn stuff. I am currently having a first look on how performant this box needs to be.

Thanks a lot again and best regards
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to Paolo

Bitte schön, Paul, and welcome to the UTM Community!

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel