Sophos Firewall: v18.5 MR1: Feedback and experiences

Has there been any regression on v18.5 MR1 related to port sharing (443 TCP) with WAF and SSLVPN?

After the updated the SSLVPN stopped and gave this error:

Wed Jul 28 10:17:00 2021 [9983] TCP/UDP: Socket bind failed on local address [undef]: Address already in use
Wed Jul 28 10:17:00 2021 [9983] Exiting due to fatal error

Can you give me the steps to reproduce this? 

There's not a lot to do to replicate this, It happened after I updated to v18.5 MR1.

• On v18.0 MR5, Create a WAF Rule on a Local Port which uses 443 for HTTPS.
• Change the SSLVPN configuration to use Port 443 at TCP. (Will work as expected)
• Update to v18.5 MR1 EAP.

After this the SSLVPN Service will stop and the error message above will show at /log/sslvpn.log.

*I will try to reboot my firewall later on to see if It fixes anything.

Hi Lucar,

I've managed to replicate this with a brand new virtual machine. If possible, keep us updated if you have any new information about this.

Thanks!

This will be addressed with NC-76446 in the actual MR1 release (GA). There will likely be another build published with this fix included. This will be addressed in the release notes. 

See: https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=18.5

Thanks, just upgraded my firewall to GA.

Good to see It has been fixed.

Thanks, just upgraded my firewall to GA.

Good to see It has been fixed.