On the Remote Access > Advanced page you can make the advanced configurations for remote access clients. The IPClosed Internet Protocol addresses of the DNSClosed Domain Name Service and WINSClosed Windows Internet Naming Service servers you enter here are provided for the use of remote access clients while establishing a connection to the gateway, thus providing full name resolution for your domain.

DNS server: Specify up to two DNS servers of your organization.

Note – IPv6 servers are not supported by SSL VPN on Windows.

WINS server: Specify up to two WINS servers of your organization. Windows Internet Naming Service (WINS) is Microsoft's implementation of NetBIOS Name Server (NBNS) on Windows operating systems. Effectively, WINS is to NetBIOS names what DNS is to domain names—a central mapping of hostnames to IP addresses.

Domain name: Enter the hostname of your Sophos UTM as a fully qualified domain name (FQDN). The fully qualified domain name is an unambiguous domain name that specifies the node's absolute position in the DNS tree hierarchy, for example A hostname may contain alphanumeric characters, dots, and hyphens. At the end of the hostname there must be a special designator such as com, org, or de. The hostname will be used in notification messages to identify Sophos UTM.

Note – For PPTPClosed Point to Point Tunneling Protocol and L2TPClosed Layer Two (2) Tunneling Protocol over IPsec the domain name cannot be distributed automatically, but needs to be configured on the client side.
With iOS devices using Cisco VPN Client, the DNS servers specified above are only used to resolve hosts that belong to the specified domain.