Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 40 subscribers
  • Views 5826 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RDP Dropouts over VPN

John Rodgers

Hi,

 

for the past couple of months we have been experiencing timeouts/dropouts/crashed over our Sophos XG SSL VPN. Ran WireShark tests and seen a reset packet occur at the time of dropout on  port 3389(default RDP) going to the Sophos VPN IP address. when this happens the end users RDP stops or goes blank and comes up 'attempting to reconnect' it comes back on after 10-30 seconds but it can be really frequent(no pattern), just to be clear the VPN stays connected its just RDP that goes a little odd. 

any ideas what could be causing this, because RDP internally to another machine on the network has no issue it just from the VPN we see these Reset packets for RDP



This thread was automatically locked due to age.
  • 0

    Reset means, something in the Program / Protocol have to disable the connection... Or is most likely to kill the session, because it wants to. 

    You could try to enable MASQ on the VPN to LAN rule. Sometimes this helps. 

    But most likely this is causes by the client (some windows stuff). Not always you have to blame the network for everything ;) 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Will turn on MASQ for our VPN shortly and let you know if this helps, not blaming the network just trying to cross of what could be causing this. this XG430 is fairly new and is apart of the VPN/RDP chain so like i say crossing it all off one by one :) 

  • 0

    See KB127785.

    This command works for me: set vpn conn-remove-tunnel-up disable

Unfiltered HTML