Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 38 subscribers
  • Views 1728 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Old Ipsec VPN automatically populates in sophos connect client after switching to SSL VPN

Brian Straka

So I have kind of a weird one.  We were using IPSec for endpoint user VPN access and we recently switched to SSL VPN.  We are using the Sophos Connect 2.1 client and created a brand new .pro file for the SSL VPN connection.  We turned off IPSec remote access on the FW.  Whether you delete the old config file in the sophos connect client or are a new user being set up.. once you connect to the SSL VPN, it somehow populates the sophos connect client with the old IPsec VPN configuration as well.  I feel like this has something to do with how the sophos connect client uses the end user portal on the back end. I am not sure how to get it to stop automatically pulling down a config that is turned off.  

Upon reboot of the PC, the sophos connect client has the IPSec connection (currently disabled on the FW) in the first position and the SSL VPN connection in the second position so users automatically connect to the incorrect connection. 

It is causing a support headache and I am really confused at how these devices are "pulling down" a config as it is not my understanding of how this sophos connect client works....

Any assistance or insight on how to stop this would be really appreciated!



This thread was automatically locked due to age.
Parents
  • +1

    You need to "Reset" the config of IPsec to disable the IPsec auto provisioning. 

     "RESET" should do the job.
    e.g.
    a. configure SSL (user X) /IPsec(user Y)
    b. User .pro file for user "X". you will get both config SSL/IPsec
    c. Do ""The "Reset" button under VPN -> IPsec (remote access)"" Now again use .pro file and see if you get both config or single only SSL

    __________________________________________________________________________________________________________________

Reply
  • +1

    You need to "Reset" the config of IPsec to disable the IPsec auto provisioning. 

     "RESET" should do the job.
    e.g.
    a. configure SSL (user X) /IPsec(user Y)
    b. User .pro file for user "X". you will get both config SSL/IPsec
    c. Do ""The "Reset" button under VPN -> IPsec (remote access)"" Now again use .pro file and see if you get both config or single only SSL

    __________________________________________________________________________________________________________________

Children
No Data
Unfiltered HTML