Turn on the User Portal
Go to Management > User Portal > Global.
You must turn on the User Portal for the remote access users.
If the switch is gray, click it to turn on the User Portal.
Select the networks that are allowed to access the User Portal.
To the Allowed networks box, add the networks that should be allowed to access the User Portal. Example: Any, or the respective VPN Pool, or only gforeman).
Cross Reference: Find more information about the User Portal in the Sophos UTM administration guide under Management.
Depending on the security policy of your organization and the requirements of your network, you might have to make additional settings.
After configuring the VPN server (headquarter), remote users must configure their devices.