We have XG 18.0.4 MR-4.
We are migrating from UTM, where the L2TP VPNs worked perfectly.
We have added all users (local authentication) to the XG. Users now connect to the XG from home, we have made no change at the Windows end.
Our VPN users are being disconnected randomly, but regularly.
I want to try and work out if it is the client (Windows 10) that is asking for the disconnection, or the XG.
I have looked through access_server.log and charon.log, but there's a lot of data and I'm not sure what I'm looking for.
Is there an easy way to determine which end is causing the disconnection?
Thanks for your comment, we are going to try the OVPN-style SSL VPN.
I'll mark this as closed and verify your answer.
Thank you for contacting the Sophos Community.
Is this only affecting L2TP users or users of SSL VPN or Sophos Connect, if you have any?
In the charon.log you could search for the word, "DELETE" and then search in the log for that time of frame
# less charon.log | grep "delete"
Once you get the time run the same command without the grep and using Pag UP or Page Down search what happened around the time the user got disconnected
# less charon.log
..we have only L2TP users, so it only happens to them.