Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=remote-access-VPN-clientless-bookmark-terminal-access

Remote terminal access

Add a bookmark to remotely access terminals through telnet and SSH.

Add Telnet or SSH bookmarks

  1. Go to Remote access VPN > Clientless SSL VPN policy.
  2. Under Bookmarks, click Add.
  3. Enter a name.

  4. Under Type, select one of the following options:

    • Telnet: Allows access to the terminal using telnet
    • SSH: Allows access to the terminal using Secure Socket Shell
  1. Under URL, enter the destination server's IP address or hostname.
  2. Optional: Enter the service port configured on the server if it differs from the default value.
  3. Optional: Turn on Share session to share the session with other users, for example, for collaborative sessions.
  4. Click Save.
  1. Under URL, enter the destination server's IP address or hostname.
  2. Optional: Enter the service port configured on the server if it differs from the default value.
  3. Enter the username from the server's credentials.

  4. Optional: Turn on Automatic login and select an option for authentication:

    • Password: Enter the server's password.
    • Private key: Generate a public-private key pair using an application, such as PuTTYgen, and enter the private key.

    The firewall automatically authenticates users based on the password or private key you specify. If you don't select Automatic login, users must enter the server's password.

  5. Under Public host key, paste the server's public key.

    The firewall establishes a connection based on the server's public key.

  6. Optional: Turn on Share session to share the session with other users, for example, for collaborative sessions.

  7. Click Save.

Add to clientless SSL VPN policy

Add the bookmark to a clientless SSL VPN policy. See Add a clientless SSL VPN policy.

Terminal connection options

Users can access the bookmarks through the VPN portal. To establish the connection, they must click the bookmark. See Clientless access connections.

To see the options after establishing the connection, users must do as follows:

  1. Hover over the top of the remote server's screen.

    Telnet and SSH options.

  2. Click Connection and click one of the following options:

    • Stop session: Stops the session for all shared users.

    • Suspend session: Pauses the session only for the user who suspends the session. The session resumes when the user next clicks Connect in the VPN portal.

      The session isn't paused for shared users.

More resources