Dear all,
I am not able to connect my Internal Network through SSL-VPN can someone help me where the Problem is?
here is the log file
Mon Nov 01 16:28:11 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]Mon Nov 01 16:28:11 2021 Attempting to establish TCP connection with [AF_INET]192.168.10.2:8443 [nonblock]Mon Nov 01 16:28:11 2021 MANAGEMENT: >STATE:1635780491,TCP_CONNECT,,,,,,Mon Nov 01 16:28:12 2021 TCP connection established with [AF_INET]192.168.10.2:8443Mon Nov 01 16:28:12 2021 TCPv4_CLIENT link local: [undef]Mon Nov 01 16:28:12 2021 TCPv4_CLIENT link remote: [AF_INET]192.168.10.2:8443Mon Nov 01 16:28:12 2021 MANAGEMENT: >STATE:1635780492,WAIT,,,,,,Mon Nov 01 16:28:12 2021 MANAGEMENT: >STATE:1635780492,AUTH,,,,,,Mon Nov 01 16:28:12 2021 TLS: Initial packet from [AF_INET]192.168.10.2:8443, sid=76a04405 ce282c32Mon Nov 01 16:28:12 2021 VERIFY OK: depth=1, C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Default_CA_IhUBaUk0QMxUMzm, emailAddress=na@example.comMon Nov 01 16:28:12 2021 VERIFY X509NAME OK: C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_Msmuj2KJdzamsAo, emailAddress=na@example.comMon Nov 01 16:28:12 2021 VERIFY OK: depth=0, C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_Msmuj2KJdzamsAo, emailAddress=na@example.comMon Nov 01 16:28:13 2021 Connection reset, restarting [0]Mon Nov 01 16:28:13 2021 SIGUSR1[soft,connection-reset] received, process restartingMon Nov 01 16:28:13 2021 MANAGEMENT: >STATE:1635780493,RECONNECTING,connection-reset,,,,,Mon Nov 01 16:28:13 2021 Restart pause, 5 second(s)
Hi Nazir Heravi,
Is an upstream router(ISP) configured with static IP or PPPoE?
If it’s configured with static IP then define 'Override hostname' with that IP in SSL VPN settings on the XG firewall.…
Hello Nazir,
Thank you for contacting the Sophos Community.
The logs don't show the SSL VPN trying to connect to any Public IP, but rather Private IPs, (unless you tried to obscure the Public IPs), does your XG has a Public IP?
If not, you’ll need to find the Public IP of the upstream device, and add that to the SSL VPN Override hostname (Configure >> VPN >> Show VPN Settings >> Override hostname.
Regards,
Hallo
I am still not able to connect SSL VPN can you advice me where the problem can be ?
Sat Nov 13 22:06:39 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]Sat Nov 13 22:06:39 2021 MANAGEMENT: >STATE:1636837599,RESOLVE,,,,,,Sat Nov 13 22:06:42 2021 Attempting to establish TCP connection with [AF_INET]79.226.58.37:8443 [nonblock]Sat Nov 13 22:06:42 2021 MANAGEMENT: >STATE:1636837602,TCP_CONNECT,,,,,,Sat Nov 13 22:06:43 2021 TCP connection established with [AF_INET]79.226.58.37:8443Sat Nov 13 22:06:43 2021 TCPv4_CLIENT link local: [undef]Sat Nov 13 22:06:43 2021 TCPv4_CLIENT link remote: [AF_INET]79.226.58.37:8443Sat Nov 13 22:06:43 2021 MANAGEMENT: >STATE:1636837603,WAIT,,,,,,Sat Nov 13 22:06:43 2021 MANAGEMENT: >STATE:1636837603,AUTH,,,,,,Sat Nov 13 22:06:43 2021 TLS: Initial packet from [AF_INET]79.226.58.37:8443, sid=88b6fc8d e50d8b66Sat Nov 13 22:06:43 2021 VERIFY OK: depth=1, C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Default_CA_IhUBaUk0QMxUMzm, emailAddress=na@example.comSat Nov 13 22:06:43 2021 VERIFY X509NAME OK: C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_0iexzAaWfiuMl7H, emailAddress=na@example.comSat Nov 13 22:06:43 2021 VERIFY OK: depth=0, C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_0iexzAaWfiuMl7H, emailAddress=na@example.comSat Nov 13 22:06:43 2021 Connection reset, restarting [0]Sat Nov 13 22:06:43 2021 SIGUSR1[soft,connection-reset] received, process restartingSat Nov 13 22:06:43 2021 MANAGEMENT: >STATE:1636837603,RECONNECTING,connection-reset,,,,,Sat Nov 13 22:06:43 2021 Restart pause, 5 second(s)Sat Nov 13 22:06:48 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]Sat Nov 13 22:06:48 2021 MANAGEMENT: >STATE:1636837608,RESOLVE,,,,,,Sat Nov 13 22:06:48 2021 Attempting to establish TCP connection with [AF_INET]79.226.58.37:8443 [nonblock]Sat Nov 13 22:06:48 2021 MANAGEMENT: >STATE:1636837608,TCP_CONNECT,,,,,,Sat Nov 13 22:06:49 2021 TCP connection established with [AF_INET]79.226.58.37:8443Sat Nov 13 22:06:49 2021 TCPv4_CLIENT link local: [undef]Sat Nov 13 22:06:49 2021 TCPv4_CLIENT link remote: [AF_INET]79.226.58.37:8443Sat Nov 13 22:06:49 2021 MANAGEMENT: >STATE:1636837609,WAIT,,,,,,Sat Nov 13 22:06:49 2021 MANAGEMENT: >STATE:1636837609,AUTH,,,,,,Sat Nov 13 22:06:49 2021 TLS: Initial packet from [AF_INET]79.226.58.37:8443, sid=da4925a5 69b97a5fSat Nov 13 22:06:49 2021 VERIFY OK: depth=1, C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Default_CA_IhUBaUk0QMxUMzm, emailAddress=na@example.comSat Nov 13 22:06:49 2021 VERIFY X509NAME OK: C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_0iexzAaWfiuMl7H, emailAddress=na@example.comSat Nov 13 22:06:49 2021 VERIFY OK: depth=0, C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_0iexzAaWfiuMl7H, emailAddress=na@example.comSat Nov 13 22:06:50 2021 Connection reset, restarting [0]Sat Nov 13 22:06:50 2021 SIGUSR1[soft,connection-reset] received, process restartingSat Nov 13 22:06:50 2021 MANAGEMENT: >STATE:1636837610,RECONNECTING,connection-reset,,,,,Sat Nov 13 22:06:50 2021 Restart pause, 5 second(s)
Regards
Nazir
can you give us a screenshot of your LANCOM configuration regarding the port-forwarding?
Mit freundlichem Gruß, best regards from Germany,
Philipp Rusch
New Vision GmbH, GermanySophos Silver-Partner
If a post solves your question please use the 'Verify Answer' button.
Hello Philipp,
thank you from your answer, below you can see my port-forwarding in Lancom Router as well my Lancom WAN and LAN configuration
192.168.10.2 ist my sophos-firewall wan-port.
that notation "8.443" seems odd to me, can you chek this?
Also, we have had some problems with Lancom configuration through the webinterface, can you try configuration with LANconfig?
I didn't understand what do you mean that notation 8443 seems odd to you? could you please a little bit explain it what should I do here ? I do always the configuration with LAN config tool.
Hello Nazir,Most likely it's no longer necessary but just in case this was not clear yet; with "notation" jprusch's literally meant the "." in between the 8 and 443. Since it shows in your picture "8.443" in stead of "8443". I've searched for pictures of different kinds of port forwarding tables and none of the common results show port numbers with dots in between the digits.
Kind regards,
Timo
Hello Time,
unfortunately my problem is still not solved and I am surprised in this big community there is no one to support me in order to fined the Problem I thanks from Yash and Philip they tried to solve my problem but then I have got no more advice from them.in case of "." which you have meintioned I want tell you that the LANCOM Router put "." automatically
regards
It is quite simple. If you do a packet capture on the firewall (Diagnostic) and do a BFP String of "port 8443" and the result is no packets on the firewall, it means the other components does not forward the requests to the firewall (and the issue is not on the firewall itself).
__________________________________________________________________________________________________________________
Hello Toni,
I have did what you recommend and got below, do you have any recommendation for me?
as you see the port is open to out side as well.
I did not unterstand this why ?
Just to ask a basic question, where in your diagram are you trying to connect to the VPN? (Outside, from the internet, or inside?) You need separate permissions to connect from WAN versus LAN (or WIFI or any other zone), if that matters.
I am connecting from outside through WLAN see below diagram.
You need to set the switch above to enable/on. If you press refresh and do not see any traffic, then the device infront of the firewall accepts the traffic and does not forward it.