Overview
Currently businesses are constantly expanding production and business, so remote and continuous data connection is safe and an urgent requirement. However, not all businesses can pay for the cost of leasing a separate channel for internal connections between the office and the branch. To save costs, VPN is the solution that is always chosen by businesses. In addition to cost savings, VPN also helps businesses secure their important data by encrypting data with IPSec protocol and now SSL
How to configure
- Log in to Sophos XG by Admin account
- Authentication -> Group -> Click Add
- Create SSL VPN Group
- Group Name: Enter Remote SSL VPN Group
- Surfing Quota: Choose Unlimited Internet Access
- Access Time: Choose Allowed all the time
-> Click Save
- Created SSL VPN users
- Username: Enter VPN’s user
- Password: Enter SSL VPN user’s password
- Email: Enter user’s email
- Group: Choose SSL VPN group which was created before
-> Click Save
- Hosts and Services -> Choose IP Host
- With configuration define the intranet layer
- Name: Enter Local subnet
- Type: Choose Network
- IP Address: Import LAN’s IP
-> Click Save
- With IP configuration defined for SSL VPN Clients
- Name: Enter Remote SSL VPN range
- Type: Choose IP range
- IP Address: Import IP range which you want
-> Click Save
- VPN -> SSL VPN (Remote Access) -> Click Add
- Name: Enter Remote SSL VPN policy
- Policy members: Choose Remote SSL VPN Group
- Permitted network resource (IPv4): Choose Local subnet
-> Click Apply
- Authentication -> Service -> Check in SSL VPN Authentication Methods -> In Selected Authentication Server -> choose Local
- Authentication -> Services -> Check in Firewall Authentication Methods -> In Selected Authentication Server -> Choose Local
- Administration -> Device Access -> Tick in SSL VPN at WAN and LAN -> Click Apply
- VPN -> Show VPN settings
- Override hostname: Enter the IP of the end of the SSL VPN tunnel at the site -> Click Apply
- Rules and policies -> Click Add Firewall Rule
- Log in Sophos User Portal: https://ipfirewall:4443
- Choose Download for Windows -> Install file which was downloaded -> Double click in SSL VPN icon
-> Connect VPN with username and password of SSL VPN user which was created before
Leave a Reply