Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 6617 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN remote client full tunneling + deny internal access

alanh999
Hi all,

I have recently installed UTM home v9 to try out the functions and I want to let my friends to access the SSL VPN of my Sophos UTM box (as remote clients) for internet connection with full tunneling but not accessing my internal network. The reason of having such setup is to bypass regional IP restriction of some websites and services.

According to the manual, I should put Any in the local network field of the SSL VPN profile for full tunneling. However if I do this, the VPN remote clients can access my internal network devices like NAS by typing the internal IP of these devices.
I tried to setup rules in Firewall to block the SSL VPN network from accessing my internal network but it doesn't work -  the remote clients can still access the internal network devices.

I am wondering if anybody has the experience of setting up something like which I am trying to achieve? Is this doable?

Thanks in advance and you help is much appreciated!

Regards,
Alan


This thread was automatically locked due to age.
Parents
  • 0
    Instead of a firewall rule, vilic, he could replace "Any" in the SSL VPN Profile with "Internet" and that also would be effective for Web Filtering.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Instead of a firewall rule, vilic, he could replace "Any" in the SSL VPN Profile with "Internet" and that also would be effective for Web Filtering.

    Cheers - Bob


    Hi Bob thanks for your reply!

    I am not sure if only putting Internal network in the local network field will form a full tunneling connection for remote clients? And this doesn't seem to block access from remote clients to internal devices?
Reply
  • 0 in reply to BAlfson
    Instead of a firewall rule, vilic, he could replace "Any" in the SSL VPN Profile with "Internet" and that also would be effective for Web Filtering.

    Cheers - Bob


    Hi Bob thanks for your reply!

    I am not sure if only putting Internal network in the local network field will form a full tunneling connection for remote clients? And this doesn't seem to block access from remote clients to internal devices?
Children
No Data
Unfiltered HTML