This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

External Users get Access to Internal company VPN

Dear All,

I'm using a SOPHOS UTM as my firewall and I have a few users who are working as a contractor to our company.
As part of the requirement, the users need to connect to our company VPN to update a local website.
which way is the best in order the mentioned user is able to get access to the specific local server but not to all local networks?

This thread was automatically locked due to age.

Top Replies

emmosophos over 2 years ago +1

Hello Nazir, Thank you for contacting the Sophos Community. You could create a new SSL VPN profile for these users and specify in the Profile the access to the network/IP(s) they need access to, and…

rfcat_vk over 2 years ago

Hi,

are you using a UTM (SG) or XG?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 EAP

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
Nazir Heravi over 2 years ago in reply to rfcat_vk

Hi, I am useing a UTM SG
Cancel
Vote Up 0 Vote Down

Cancel
rfcat_vk over 2 years ago in reply to Nazir Heravi

Hi,

I have moved this to the UTM forum which willmore than likely be able to assist you.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 EAP

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
emmosophos over 2 years ago

Hello Nazir,

Thank you for contacting the Sophos Community.

You could create a new SSL VPN profile for these users and specify in the Profile the access to the network/IP(s) they need access to, and add them to this, then create a User base Firewall Rule with the specific users and destination IP of the Server(s) they need access to.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +1 Vote Down

Cancel
PhilippRusch over 2 years ago in reply to emmosophos

Hello Nazir,

emmosophos recommendation would look like this:

Of course, you will have to define the users and a group object, and the appropriate Webserver Host-Objects before.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
Nazir Heravi over 2 years ago in reply to PhilippRusch

thank you very much it works good
Cancel
Vote Up 0 Vote Down

Cancel