How to Configure SSL VPN

-
Guide to config
  • Log on to Sophos XG by Admin account

  • Authentication -> Group -> Click Add


  • Create SSL VPN Group
    • Group Name: Enter Remote SSL VPN Group
    • Surfing Quota: Choose Unlimited Internet Access
    • Access Time: Choose Allowed all the time
-> Click Save


  • Create SSL VPN users
    • Username: Enter vpn’s user
    • Password: Enter SSL VPN user’s password
    • Email: Enter user’s email
    • Group: Choose SSL VPN group which was created before
-> Click Save


  • Hosts and Services -> Choose IP Host
  • With configuration define the intranet layer
    • Name: Enter Local subnet
    • Type: Choose Network
    • IP Address: Import LAN’s IP
-> Click Save
  • With IP configuration defined for SSL VPN Clients
    • Name: Enter Remote SSL VPN range
    • Type: Choose IP range
    • IP Address: Import IP range which you want
-> Click Save


  • VPN -> SSL VPN (Remote Access) -> Click Add
    • Name: Enter Remote SSL VPN policy
    • Policy members: Choose Remote SSL VPN Group
    • Permitted network resource (IPv4): Choose Local subnet
-> Click Apply


  • Authentication -> Services -> Check in SSL VPN Authentication Methods -> In Selected Authentication Server, choose Local

  • Authentication -> Services -> Check in Firewall Authentication Methods -> In Selected Authentication Server -> Choose Local

  • Administration -> Device Access -> Tick in SSL VPN at WAN and LAN -> Click Apply


  • VPN -> Show VPN settings
  • Override hostname: Enter the IP of the end of the SSL VPN tunnel at the site -> Nhấn Apply


  • Firewall -> Click Add Firewall Rule -> Choose User/Network Rule


  • Log on Sophos User Portal: https://ipfirewall:4443

** If you can not download file on User Portal -> Choose Certificates -> Choose Certificates Authorities -> Choose Default to edit Default certificates -> Fill out all information -> Click Save
-> Click Regenerate certificate


  • Choose Download Client and Configuration for Windows -> Install file which was downloaded -> Double click in SSL VPN icon


-> Connect VPN with username and password of SSL VPN user which was created before

Comments

Post a Comment

Popular posts from this blog

Sophos XG: How to config Source NAT Rule

-
Image
Sophos XG: How to config Source NAT rule (may use IP static or dynamic) April 16, 2019 Vincent Sophos 0 This article demonstrates how to create a Source NAT firewall rule so that outbound traffic from the local will use a different static IP address or you can use MASQUERADE to configure SNAT with dynamic IP address. In order to be flexible, businesses don’t need to buy static IP How to configure Login to Sophos XG Firewall by Admin account Create a LAN layer where you want NAT Network -> Interfaces -> Click Add Interface Choose Add Alias Fill in the information You can NAT 1-1 by select only one LAN IP address or multiple LAN IP addresses by selecting the network layer -> Click Save Select Host and Services -> IP Host -> Click Add to create a WAN IP address that you want to user to put NAT in Firewall Rule -> Click Save Firewall -> Click Add Firewall Rule -> Select Business application rule Ch
Read more

Windows Search Does Not Open

-
Image
    Hi, topic's today  "Windows search does not open" .     This problem is the last update issue     follow the steps below for the solution ;         Open the command prompt as a admisitrator and run the following commands     reg add “HKCU\Software\Microsoft\Windows\CurrentVersion\Search” /v BingSearchEnabled /t        REG_DWORD /d 0 /f     reg add “HKCU\Software\Microsoft\Windows\CurrentVersion\Search” /v CortanaConsent /t              REG_DWORD /d 0 /f     tskill searchui     
Read more

How Secure Restore Works

-
Image
Veeam Backup & Replication uses the mount server as a staging server for scanning machine data with antivirus software. By default, the mount server role is assigned to one of the following machines: the Veeam backup server or a repository that stores machine backups. However, you can assign the mount server role to any 64-bit Microsoft Windows machine in your backup infrastructure. For example, you may want to run the malware scan process on a different server for security reasons. For details on mount server deployment and requirements, see Mount Server . To run the malware scan, Veeam Backup & Replication performs the following actions: On the mount server, Veeam Backup & Replication runs Veeam Mount Service to check the antivirus configuration file and antivirus software: Veeam Mount Service verifies if the AntivirusInfos.xml configuration file is located in the %ProgramFiles%\Common Files\Veeam\Backup and Replication\Mount Service folder. Veeam
Read more