VPN SET UP

1) Web browse to : https://10.147.205.19:4444 ( May get certificate error if

using IE- just continue)
2) Login in to portal ( username & password in Priv. Accounts)
3) Firstly, create the USER From Dashboard click Definitions & Users>Users
& Groups then

4) This does not link to AD user accounts so Username can be anything but
first.last name is the naming convention used where possible. Fields to be
completed are Username, Real name, email address (if known,)
Authentication-local, Password & Repeat Password then click

5) Now the user is created, there are TWO areas to add the user. Firstly set
up in Network Protection > Firewall> Click Edit in the RDP Server area (See
below)

BCHC Technical Services

1

Continued..Now click the folder icon under the Sources category ( shown
below)

Folder icon

Now, a list on the left hand pane appears, literally drag & drop the username
into the Sources pane (where existing users can be seen. Click
bottom of the page.

at the

This completes the first Firewall part.

6) Now the Remote Access part needs to be completed. Click Remote
Access> SSL Now click Edit in the section shown below for RDP Jump of
server.

Then as before, click the Folder in the Users & Groups area & drag & drop
the username into this area. (see below.) Now click Save.

This completes the setup on the Sophos UTM Server, however, the client
now has to be downloaded & installed onto the users PC. An executable
with a bundled certificate is created via the User portal. This must be
downloaded & sent to the user for them to install.

BCHC Technical Services

2

Client Download
1) Log into the User portal at : https://10.147.205.19 ( different portal to
the Webadmin no 4444 on this one,) now login WITH THE
CREDENTIALS OF THE USER YOU HAVE JUST CREATED.

2) Click on the Remote Access tab & Download the first in the list ( this
has the executable & Certificate bundled.

Once downloaded, this executable needs to be run on the device that will be
used for VPN into our network.
Once installed, a set of traffic lights will appear in the system tray - double click
these and enter the username & password previously set up.

Once connected the lights will go Green.

The ONLY place this allows access to is S-QUESTAPPS01VM (10.171.118.115) via
RDP. This server is then used as a jump server for the 3 rd parties to telnet / web
browse to their destination.

BCHC Technical Services

3