Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=remote-access-VPN-clientless

Clientless SSL VPN

You can allow users to access endpoints, servers, terminals, and file servers using a browser. Users don't need to install VPN clients.

Clientless SSL VPN policies allow you to limit users and their access to specific resources and services.

Bookmarks

When you create a bookmark, you specify the protocol, such as RDP, SSH, and FTPS, the destination server, and the security settings to access the server.

You assign the bookmarks to clientless SSL VPN policies, specifying the users (policy members) who can access the resources through the bookmarks.

Note

Clientless SSL VPNs don't support dynamic IP addresses.

To access bookmarks, members of a clientless SSL VPN policy must sign in to the VPN portal and go to VPN > Clientless access connections. Clicking a bookmark opens a secure connection to the selected resource in a new window.

Bookmark groups

Bookmark groups allow you to group bookmarks and assign the groups to clientless SSL VPN policies.

For example, you can create a group with bookmarks for file servers and allow access to specific users through a clientless SSL VPN policy.

More information