SFOS v19.5.1 Remote VPN connectivity issues on XG115 units

Hi Allen,

which client are you using and which version? Is this IPsec or SSL?

Hi Jprusch

II am using SSL for the remote access VPN.

Kind regards

Which client are you using, then? What version? Please give us all details here.

Both Sophos Connect Client and SSL VPN, i am getting the same results.

Does this answer what you are asking or i am missing something?

Kind regards

The version number, please.

You can lookup this info in the "About"  menupoint uinder the "... " menu

SSL VPN Client v2.1

Sophos Connect Client v2.2.90

Kind regards

Are you using both clients?

I tried both of them and i am getting the same results. It connects and SAGE does not want to work, but when the user is onsite SAGE works perfectly fine.

Kind regards

I tried both of them and i am getting the same results. It connects and SAGE does not want to work, but when the user is onsite SAGE works perfectly fine.

Kind regards

do you access your server(s) by name or by IP ?

We access by IP

Can you ping the server?

Are there firewall rules in place for the VPN to LAN Access?

Can you show us your config?

Hi Jprusch

Please see the config attached.

Are you using ovpn or .pro file? If using ovpn, maybe you have an issue with DNS:

add block-outside-dns

to ovpn file.

Hello Allen,

You always answer only part of the questions. I can't help you further like this, sorry.

I posed three questions:

1. Can you ping the server from the VPN client? This was not answered.

2. Are there firewall rules in place for VPN to LAN access? You send are screenshot, one would need to know, if your VPN config is indeed using VPN zone, then. And the order of fw rules important, too. So incomplete info.

3. Can you show us your config? The VPN configuration was meant here. We did not see thisyet.

4. Are you using both clients? Meant: are you using them in parallel on the same client? This doesn't work. Are you having two configs on the FW?

Hi Philipp

Thank you for all your inputs, i managed to sort out the issue by editing the host file in System32 folder

Kind regards

Allen