Running SFOS: 17.1.2 MR-2
Suddenly when running SSLVPN it gives error:
Mon Sep 17 08:39:55 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:2443
Mon Sep 17 08:39:55 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Sep 17 08:39:55 2018 UDP link local: (not bound)
Mon Sep 17 08:39:55 2018 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:2443
Mon Sep 17 08:39:55 2018 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:2443, sid=cb74f153 8b656703
Mon Sep 17 08:39:55 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Mon Sep 17 08:39:55 2018 VERIFY OK: depth=1, C=dk, L=MyCity, O=None, CN=None WebAdmin CA, emailAddress=user@domain.com
Mon Sep 17 08:39:55 2018 VERIFY X509NAME OK: C=dk, L=MyCity, O=None, CN=fw.domain.com
Mon Sep 17 08:39:55 2018 VERIFY OK: depth=0, C=dk, L=MyCity, O=None, CN=fw.domain.com
Mon Sep 17 08:40:55 2018 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
ERROR: TLS error! See log for details
Mon Sep 17 08:40:55 2018 TLS Error: TLS handshake failed
Mon Sep 17 08:40:55 2018 SIGUSR1[soft,tls-error] received, process restarting
Mon Sep 17 08:40:55 2018 Restart pause, 5 second(s)
Mon Sep 17 08:41:00 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:2443
Mon Sep 17 08:41:00 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Sep 17 08:41:00 2018 UDP link local: (not bound)
Mon Sep 17 08:41:00 2018 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:2443
Mon Sep 17 08:41:00 2018 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:2443, sid=a6469550 665f08fd
Mon Sep 17 08:41:00 2018 VERIFY OK: depth=1, C=dk, L=MyCity, O=None, CN=None WebAdmin CA, emailAddress=user@domain.com
Mon Sep 17 08:41:00 2018 VERIFY X509NAME OK: C=dk, L=MyCity, O=None, CN=fw.domain.com
Mon Sep 17 08:41:00 2018 VERIFY OK: depth=0, C=dk, L=MyCity, O=None, CN=fw.domain.com
Disconnected
When choosing TCP it does not work, it just gives this:
Mon Sep 17 08:56:44 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:8443
Mon Sep 17 08:56:44 2018 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Sep 17 08:56:44 2018 Attempting to establish TCP connection with [AF_INET]xxx.xxx.xxx.xxx:8443 [nonblock]
Mon Sep 17 08:56:45 2018 TCP connection established with [AF_INET]xxx.xxx.xxx.xxx:8443
Mon Sep 17 08:56:45 2018 TCP_CLIENT link local: (not bound)
Mon Sep 17 08:56:45 2018 TCP_CLIENT link remote: [AF_INET]xxx.xxx.xxx.xxx:8443
Mon Sep 17 08:56:45 2018 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:8443, sid=cf9ad1ff 8d8dc1d6
Mon Sep 17 08:56:46 2018 VERIFY OK: depth=1, C=dk, L=MyCity, O=None, CN=None WebAdmin CA, emailAddress=user@domain.com
Mon Sep 17 08:56:46 2018 VERIFY X509NAME OK: C=dk, L=MyCity, O=None, CN=fw.domain.com
Mon Sep 17 08:56:46 2018 VERIFY OK: depth=0, C=dk, L=MyCity, O=None, CN=fw.domain.com
Mon Sep 17 08:56:46 2018 Connection reset, restarting [0]
Mon Sep 17 08:56:46 2018 SIGUSR1[soft,connection-reset] received, process restarting
Mon Sep 17 08:56:46 2018 Restart pause, 5 second(s)
Never been a issue with UTM on port 2443 and UDP.
Try changing port number to 8443, with no luck.
This thread was automatically locked due to age.
