Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 5418 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG86 Random Issue on SSL Site to Site VPN after upgrade to 19

Lorena Zandona

I have a Site to Site (XG is server) and before upgrade all work for year.

After upgrade randomly (i think this happen on night for some sevice restart maybe?) the firewall not use the Tunnel to Route the traffic

The VPN is working from the other site to this, only this to other stop working.

On log page you can see this (192.168.1.x is the remote network)

After editing config and saving (i think this reconnect vpn) al start working again

What i can do?? Only wait a fix? Is rather annoying almost every day i have to fix this

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    What's the exact version of SFOS you are using? Can you send a screenshot?

    What is at the other end of the tunnel?

    Mit freundlichem Gruß, best regards from Germany,

    Philipp Rusch

    New Vision GmbH, Germany
    Sophos Silver-Partner

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to PhilippRusch

    Latest relase: SFOS 19.0.1 MR-1-Build365
    The other end is an ASUS router: RT-AC51U

    On this firewall we have an IPSEC site to site, varius client SSL VPN.. al of this work without problem
    Already fixed the range for the new setting of the ssl vpn on v19

    Another note: the VPN is working from the other site to this, only this to other stop working

  • 0 in reply to Lorena Zandona

    Could you share the ipsec config screen shot and the sdwan routing config screen shot ? We will take a look at this issue and update on this soon.

  • 0 in reply to Giridhar Katti

    As the subject is the SSL VPN not working... IPSEC work normal. No config is changed after upgrade. The problem started immediately after update.. Editing and saving SSL Site to Site config re-enabled the normal behaviour for some time

    On SDWAN routing i have only a config for the Wifi to use one GW instead of the other

    But here:

    Dont share SSL vpn config screenshot because there no particular setting on the gui only lan names

    Here obfuscated config file for ssl svpn

    {"server_address":["88.x.x.x","192.168.178.250","192.3.3.250"],"authentication_algorithm":"SHA256","password":"****","key":"-----BEGIN RSA PRIVATE KEY-----***\n-----END RSA PRIVATE KEY-----","server_dn":"C=IT, ST=NA, L=Capriolo, O=***, OU=OU, CN=***, emailAddress=***","server_port":"8443","username":"****","encryption_algorithm":"AES-128-CBC","protocol":"udp","compression":"1","ca_cert":"-----BEGIN CERTIFICATE-----\n{"server_address":["88.x.x.x","192.168.178.250","192.3.3.250"],"authentication_algorithm":"SHA256","password":"***","key":"-----BEGIN RSA PRIVATE KEY-----\n***\n-----END RSA PRIVATE KEY-----","server_dn":"C=IT, ST=NA, L=Capriolo, O=***, OU=OU, CN=***, emailAddress=***","server_port":"8443","username":"***","encryption_algorithm":"AES-128-CBC","protocol":"udp","compression":"1","ca_cert":"-----BEGIN CERTIFICATE-----\n***\n-----END CERTIFICATE-----","certificate":"-----BEGIN CERTIFICATE-----\n***\n-----END CERTIFICATE-----"}

  • 0 in reply to Lorena Zandona

    In non-working case, can you check if route for the remote network is installed on the XGS (through the route command on the shell) ?

Reply Children
Unfiltered HTML