Sophos Firewall

Discussions XG SSL VPN not able to connect to internet

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 4 replies
Subscribers 38 subscribers
Views 7601 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG SSL VPN not able to connect to internet

Jason Etten over 3 years ago

I have setup the VPN configuration per one of tutorials. I am able to get a SSL VPN to connect via iPhone and a tablet.

I have the option to use the default gateway under tunnel access.

I can ping devices on my network. I am not able to access the internet. Is there another setting I need to change or a FW rule I should setup?

This thread was automatically locked due to age.

Top Replies

BeEf over 3 years ago in reply to Jason Etten +1 verified

In Version 17.5 the NAT is at the end of the firewall rule. For Version 18 look here: community.sophos.com/.../how-to-configure-firewall-rule-and-nat-rule-on-sophos-xg-v18

0 BeEf over 3 years ago

If you are routing all traffic through the VPN you need to add the VPN network on your Internet Firewall Rule and NATing needs to work for this network. As far as I can see from your screenshot you are using this mode.

Another solution would be to use split tunnel and define the subnets you want to route through the tunnel and use a the local breakout for internet access. Switch the default gateway off and enter the Permittet IPv4 oder IPv6 Networks. It might be necessary to restart the service and/or download the VPN configuration again from the user portal after this change.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jason Etten over 3 years ago in reply to BeEf

I have the VPN network setup on a FW rule. How do I add the NATing?

FW rule for VPN access

I added a FW rule to allow traffic to the WAN zone. Don't know if this is needed or if it is setup correctly. Any help would be appreciated.
Cancel
Vote Up 0 Vote Down

Cancel
+1 BeEf over 3 years ago in reply to Jason Etten

In Version 17.5 the NAT is at the end of the firewall rule.

For Version 18 look here: community.sophos.com/.../how-to-configure-firewall-rule-and-nat-rule-on-sophos-xg-v18
Cancel
Vote Up +1 Vote Down

Cancel
0 Jason Etten over 3 years ago in reply to BeEf

The NAT setup work. Thank you everyone for the responses.
Cancel
Vote Up 0 Vote Down

Cancel