First create object definition i.e. new host IP. Go to Definitions & Users > Network Definitions and from dropdown select “Hosts” to see existing hosts objects. To create new select “New Network Definition” and select “Host” as Type and enter name and IP.

Now add route to this host over VPN. Open Remote Access > SSL and select the profile to which User/Group belongs (consult Definitions above). Here just drag and drop the object (i.e. host in this case) to Edit dialog.

Now you also need it allow through Firewall. Go to Network Protection > Firewall and edit the rule adding a group or user access to new host IP.

• Sophos UTM 9