Smaller subnets, such as /25 and smaller, result in fewer IP addresses for lease.įor example, a 192.168.0.0/27 network in a firewall with eight concurrent instances has a single leasable IP address after assigning the subnets to the eight tun0 interfaces.You can download the Sophos Connect client and SSL VPN configuration to establish a remote access SSL VPN connection between your endpoint and your organization's network. The firewall automatically slices subnets from the configured network address and subnet and assigns them to the tun0 interfaces. Each instance creates a tun0 interface, which requires an independent subnet for routing and internal traffic distribution. The firewall runs SSL VPN tunnels in multiple instances, depending on the number of CPUs in the model. FAQs Why can't I add subnets smaller than /24 in SSL VPN global settings? The firewall automatically applies the conversion from IP range to network for these system hosts because it dynamically adds the leased IP addresses to these system hosts when remote users establish connections. See Configure remote access SSL VPN with Sophos Connect client. So, traffic may not flow through the remote access SSL VPN connections after you migrate.įor the source and destination networks in the corresponding firewall rules, select the system hosts #ALL_SSLVPN_RW and #ALL_SSLVPN_RW6.

However, if you've added a custom IP host for the lease range to the corresponding firewall rules, the host's lease range may not match the migrated subnet. When you migrate to 19.5 and later, the firewall converts the IP range and subnet mask configured in 18.5.x and earlier versions to the subnet value. The firewall leases IP addresses to remote access SSL VPN users from the network you configure.

In version 19.0.x and later, on SSL VPN global settings, for Assign IPv4 addresses, you enter a network IP address and subnet rather than an IP range.

Troubleshooting remote access SSL VPN Troubleshooting Traffic doesn't flow through remote access SSL VPN connections after migrating to version 19.5 Your browser doesn’t support copying the link to the clipboard. It will remain unchanged in future help versions. Always use the following when referencing this page.

Ssl vpn sophos mac