This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Split Tunneling

I'm using the Sophos SSL VPN Client to connect to my work computer from home, but I also want to make some large downloads on my home internet connection. I'm aware that the way to do this is via Split Tunneling, but I've been unable to find any clear instructions on how exactly an end user configures their computer to run a split tunnel with the Sophos SSL client - do you create a new connection in the Network and Sharing centre? That doesn't seem like it would play nice with the client's settings. Any advice would be greatly appreciated!

This thread was automatically locked due to age.

Parents

+1 Ole Heydt over 6 years ago

Hi,

when using the Sophos SSL VPN Client, you already have a working split tunnel. The VPN-Interface adds a route to the IP-address of your work-computer which is routed through the ssl-vpn interface. Any other traffic, like downloads, will be routed by your standard home-router / internet connection.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+1 Ole Heydt over 6 years ago

Hi,

when using the Sophos SSL VPN Client, you already have a working split tunnel. The VPN-Interface adds a route to the IP-address of your work-computer which is routed through the ssl-vpn interface. Any other traffic, like downloads, will be routed by your standard home-router / internet connection.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Sam Smith2 over 6 years ago in reply to Ole Heydt

Oh! So it literally just applies to the remote connection functionality and nothing else? That's convenient! It also explains why I couldn't find an explanation.

Our work connection has trouble dealing with all the regular office bandwidth, and downloading all this stuff through it would have been a serious problem.

Thanks for explaining!
Cancel
Vote Up 0 Vote Down

Cancel
0 alan weir over 6 years ago in reply to Sam Smith2

For future reference, in case you were wondering, I believe that masquerading the VPN
Pool as the external interface (VPN Pool->External) would make it a full tunnel, which is ideal for certain circumstances like browsing the internet from an open wifi connection, then you could have the benefits of an encrypted tunnel, and also have web filtering too.

There is an excellent thread that talks more about it.

https://community.sophos.com/products/unified-threat-management/f/vpn-site-to-site-and-remote-access/74941/help-with-ssl-vpn-mandatory-full-tunnel

And also the SSL VPN guide. https://community.sophos.com/kb/en-us/116038
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to alan weir

In order to have a full tunnel, you also must add "Internet IPv4" to 'Local Networks' in the SSL VPN Profile. In order to have Web Filtering, you must add "VPN Pool (SSL)" to 'Allowed Networks'.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel