Work from Home using SSL VPN via SOPHOS XG Firewall and using Active Directoy for Single-On guided step by step

1. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 1
SOPHOS XG FIREWALL
Contents
SOPHOS XG FIREWALL .......................................................................................................................................... 1
Configure and enable Single Sign-on (SSO) ......................................................................................................... 2
Install Agent on Primary Domain Controller .................................................................................................... 2
Setup VPN on the XG Firewall................................................................................................................................ 7
How to use SSL VPN through Sophos XG Firewall (Join Domain Computers) ........................................................... 11

2. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 2
Configure and enable Single Sign-on (SSO)
Install Agent on Primary Domain Controller
Downloadandinstall STASonthe domaincontroller
Port shouldbe openonAD: AD= XG UDP 6060, XG = AD UDP 6677, Agent= collectorTCP5566
Install the STASsuite onthe Primary DomainController

3. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 3
Specifythe networktomonitorandSTA collector
Once configure testthe connectivitywiththe SophosAppliance,if youhave additional domaincontrollerdeploy
STASagent andspecifycollectorthe primarydomaincontroller

4. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 4
Enable STASon the XG Firewall
GO to authentication
Addyou active directoryserver

5. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 5
Addthe serverfor authentication
In Active directorycreate asecuritygroupandadd memberswhichwill be allow forSSLVPN
Afterimportthe SSL VPN Users group to XG Firewall

6. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 6

7. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 7
Setup VPN on the XG Firewall
For accessto VPN the VPN port and userportal mustbe openfromthe wan to downloadinstaller,configurationand
access (inmyscenarioport444 and 8443 has beenopenonthe ISPRouter – PortForwarding)
Configure SSLVPN(remote access) andin the Policymembersaddthe SSLVPN Usersgroup that needVPN Access

8. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 8
Enable the tunnel accessforyour office network
Gatewaycan be turnoff if clientside will use theirWAN (example:theirmytathome)
Setupthe VPN settings

9. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 9
Create the Firewall Rule

10. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 10
Allowaccesstouserportal andssl vpnfromWAN

11. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 11
How to use SSL VPN through Sophos XG Firewall (Join Domain Computers)
Work outside the Office Securely
Connectto the publicname and downloadyoursetup+ configurationfile
Importantnote: each userhas to downloadtheirownsetupandconfigurationfile
URL: https://example.dyndns.biz:444
Loginto the portal usingyourusername andpassword
Go to SSL VPN and downloadclientandconfigurationforwindows

12. WorkingfromHome using SOPHOSXG FIREWALL SSL VPN withSingle-On
NASEEMKHOODORUTH 12
Afterdownload,proceedwithinstallationof the SSLVPN client(Install)
Afterinstallation,lookforthe icon rightclickandconnect (Internetconnectionisrequired)
Enter yourwindowsusername andpassword
Once you are connect the iconwill change fromred to green - now you are connectedwiththe server
(xxxx.LOCAL)
As fromhere youcan browse or connectto your terminal server