Sophos XG FIREWALL SSL VPN Configuration
Download as DOCX, PDF0 likes416 views
The document provides a guide for configuring and using a Sophos XG firewall with SSL VPN and Single Sign-On (SSO) for remote work. It details steps for installing necessary agents on the primary domain controller, setting up VPN access, and enabling authentication through Active Directory. Additionally, it includes instructions for downloading and installing the SSL VPN client to securely connect to the office network.
Sophos XG FIREWALL SSL VPN Configuration
- 1. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 1 SOPHOS XG FIREWALL Contents SOPHOS XG FIREWALL .......................................................................................................................................... 1 Configure and enable Single Sign-on (SSO) ......................................................................................................... 2 Install Agent on Primary Domain Controller .................................................................................................... 2 Setup VPN on the XG Firewall................................................................................................................................ 7 How to use SSL VPN through Sophos XG Firewall (Join Domain Computers) ........................................................... 11
- 2. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 2 Configure and enable Single Sign-on (SSO) Install Agent on Primary Domain Controller Downloadandinstall STASonthe domaincontroller Port shouldbe openonAD: AD= XG UDP 6060, XG = AD UDP 6677, Agent= collectorTCP5566 Install the STASsuite onthe Primary DomainController
- 3. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 3 Specifythe networktomonitorandSTA collector Once configure testthe connectivitywiththe SophosAppliance,if youhave additional domaincontrollerdeploy STASagent andspecifycollectorthe primarydomaincontroller
- 4. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 4 Enable STASon the XG Firewall GO to authentication Addyou active directoryserver
- 5. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 5 Addthe serverfor authentication In Active directorycreate asecuritygroupandadd memberswhichwill be allow forSSLVPN Afterimportthe SSL VPN Users group to XG Firewall
- 6. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 6
- 7. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 7 Setup VPN on the XG Firewall For accessto VPN the VPN port and userportal mustbe openfromthe wan to downloadinstaller,configurationand access (inmyscenarioport444 and 8443 has beenopenonthe ISPRouter – PortForwarding) Configure SSLVPN(remote access) andin the Policymembersaddthe SSLVPN Usersgroup that needVPN Access
- 8. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 8 Enable the tunnel accessforyour office network Gatewaycan be turnoff if clientside will use theirWAN (example:theirmytathome) Setupthe VPN settings
- 9. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 9 Create the Firewall Rule
- 10. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 10 Allowaccesstouserportal andssl vpnfromWAN
- 11. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 11 How to use SSL VPN through Sophos XG Firewall (Join Domain Computers) Work outside the Office Securely Connectto the publicname and downloadyoursetup+ configurationfile Importantnote: each userhas to downloadtheirownsetupandconfigurationfile URL: https://example.dyndns.biz:444 Loginto the portal usingyourusername andpassword Go to SSL VPN and downloadclientandconfigurationforwindows
- 12. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On NASEEMKHOODORUTH 12 Afterdownload,proceedwithinstallationof the SSLVPN client(Install) Afterinstallation,lookforthe icon rightclickandconnect (Internetconnectionisrequired) Enter yourwindowsusername andpassword Once you are connect the iconwill change fromred to green - now you are connectedwiththe server (xxxx.LOCAL) As fromhere youcan browse or connectto your terminal server