Sophos L2tp
You can configure IPsec remote access connections. Users can establish the connection using the Sophos Connect client.
Follow the steps below to configure the iPad to connect to your Sophos XG using an L2TP VPN. Click the main menu of the iPad and go to Settings General Network. Click VPN Add VPN Configuration Select L2TP and complete the following fields. The Essential Firewall Edition is a free version of the Sophos UTM software and offers fundamental security functions to help protect any business network. Start today and implement a firewall into your company’s IT environment—without charge and no strings attached. Remote Access: PPTP and L2TP over IPSec support (including iPhone. Windows 10 Client Configuration (L2TP) On Windows 10 go to Settings Network & Internet VPN. Click + Add a VPN connection. Create a basic Windows (Built-in). Sophos stops everything malicious and provides us with alerts, so we can respond quickly—and that’s worth its weight in gold.” Cliff Hogan, CIO, D4C Dental Brands Switching to Sophos Central was a simple transition and 80% of the work was carried out within just one week.”.
Introduction
The Sophos Connect client allows you to enforce advanced security and flexibility settings, such as connecting the tunnel automatically. To configure and establish IPsec remote access connections over the Sophos Connect client, do as follows:

- Configure the IPsec remote access connection.
- Send the configuration file to users.
- Add a firewall rule.
- Send the Sophos Connect client to users. Alternatively, users can download it from the user portal.
Users must do as follows:

- Install the Sophos Connect client on their endpoint devices.
- Import the configuration file into the client and establish the connection.
Configure IPsec (remote access)
- Go to VPN > IPsec (remote access) and click Enable.
- Specify the general settings:
Name
Setting
Interface
Select a WAN port.
Authentication type
Specify a preshared key or the local and remote certificates.
Local ID
Remote ID
Specify the IDs if required.
Allowed users and groups
Select the users and groups you want to allow.
- Specify the client information. The following settings are an example:
Name
Setting
Name
TestRemoteAccessVPN
Assign IP from
192.168.1.11
192.168.1.254
DNS server 1
192.168.1.5
- Specify the advanced settings you want and click Apply.
Name
Setting
Permitted network resources (IPv4)
LAN_10.1.1.0
DMZ_192.168.2.0
Send Security Heartbeat through tunnel
Sends the Security Heartbeat of remote clients through the tunnel.
Allow users to save username and password
Users can save their credentials.
- Click Export connection.
The exported tar.gz file contains a .scx file and a .tgb file.
- Send the .scx file to users.
- Optional To assign a static IP address to a user connecting through the Sophos Connect client, do as follows:
- Go to Authentication > Users, and select the user.
- On the user's settings page, go down to IPsec remote access, click Enable, and enter an IP address.
Overview
The article describes the procedure to configure an L2TP VPN remote access on a Sophos XG Firewall.

How to configure an L2TP VPN remote access
Enable L2TP VPN connections, assign IP addresses and add members
- Go to VPN > Show VPN Settings.
- Select the L2TP tab. Complete the following fields under the General Settings and Client Information sections and then click Apply.
Field | Value |
---|---|
Enable L2TP | Check Enable |
Assign IP from | Enter the IP address range to lease. |
Allow leasing IP address from RADIUS server for L2TP, PPTP, and CISCO VPN client | Optional, check this if you want to lease IP’s through RADIUS. |
Primary DNS Server | Select a DNS Server from the drop-down list, or you can specify the DNS server by selecting Other. |
Secondary DNS Server | Select a DNS Server from the list, or you can specify the DNS server by selecting Other. |
Primary WINS Server | Optional |
Secondary WINS Server | Optional |
Sophos L2tp Vpn Mac
- Click Add Member(s) to add an L2TP member. In this example, we’ve selected happy to add as an L2TP member.
- Click Apply to save the changes.
Create an L2TP policy
- Go to VPN > L2TP (Remote Access) and click Add to add an L2TP connection.
- Complete the following image and then click Save.
- Click the red icon under the Active column to activate the connection. Once connected it will show up as green.
Sophos L2tp Vpn Setup Windows 10
Create a firewall rule
Sophos L2tp Vpn Windows 10
- Go to Firewall, click Add Firewall Rule and select User/Network Rule.
- Configure the rule as follows:
Sophos L2tp Vpn
- Click Save.
- Note: It is possible for the remote host to access the internet via the XG Firewall. To do this, create a firewall rule with VPN as the source zone and WAN as the destination zone.
