This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS v19.5.1 Remote VPN connectivity issues on XG115 units

Hi Guys

I have numerous issues with regards to the new SFOS v19.5.1 on most of XG115 firewalls, as soon as we upgrade to the latest SFOS v19.5.1, the XG firewall starts to have Remote Access VPN issues.

One issue on another client the remote VPN could not connect at all, it was always timing out.

The other issue on a different client, the remote VPN could connect but SAGE program could not run.

Has anyone come across these issues yet when running the latest SFOS?

This thread was automatically locked due to age.

Top Replies

Allen Watyoka 11 months ago in reply to PhilippRusch +2 verified

Hi Philipp Thank you for all your inputs, i managed to sort out the issue by editing the host file in System32 folder Kind regards Allen

Parents

0 PhilippRusch 11 months ago

Hi Allen,

which client are you using and which version? Is this IPsec or SSL?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Allen Watyoka 11 months ago in reply to PhilippRusch

Hi Jprusch

II am using SSL for the remote access VPN.

Kind regards
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch 11 months ago in reply to PhilippRusch

You can lookup this info in the "About" menupoint uinder the "... " menu

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Allen Watyoka 11 months ago in reply to PhilippRusch

SSL VPN Client v2.1

Sophos Connect Client v2.2.90

Kind regards
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch 11 months ago in reply to Allen Watyoka

Are you using both clients?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Allen Watyoka 11 months ago in reply to PhilippRusch

I tried both of them and i am getting the same results. It connects and SAGE does not want to work, but when the user is onsite SAGE works perfectly fine.

Kind regards
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch 11 months ago in reply to Allen Watyoka

do you access your server(s) by name or by IP ?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Allen Watyoka 11 months ago in reply to PhilippRusch

We access by IP
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch 11 months ago in reply to Allen Watyoka

Can you ping the server?

Are there firewall rules in place for the VPN to LAN Access?

Can you show us your config?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Allen Watyoka 11 months ago in reply to PhilippRusch

Hi Jprusch

Please see the config attached.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog 11 months ago in reply to Allen Watyoka

Are you using ovpn or .pro file? If using ovpn, maybe you have an issue with DNS:

add block-outside-dns

to ovpn file.
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch 11 months ago in reply to Allen Watyoka

Hello Allen,

You always answer only part of the questions. I can't help you further like this, sorry.

I posed three questions:

1. Can you ping the server from the VPN client? This was not answered.

2. Are there firewall rules in place for VPN to LAN access? You send are screenshot, one would need to know, if your VPN config is indeed using VPN zone, then. And the order of fw rules important, too. So incomplete info.

3. Can you show us your config? The VPN configuration was meant here. We did not see thisyet.

4. Are you using both clients? Meant: are you using them in parallel on the same client? This doesn't work. Are you having two configs on the FW?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 PhilippRusch 11 months ago in reply to Allen Watyoka

Hello Allen,

You always answer only part of the questions. I can't help you further like this, sorry.

I posed three questions:

1. Can you ping the server from the VPN client? This was not answered.

2. Are there firewall rules in place for VPN to LAN access? You send are screenshot, one would need to know, if your VPN config is indeed using VPN zone, then. And the order of fw rules important, too. So incomplete info.

3. Can you show us your config? The VPN configuration was meant here. We did not see thisyet.

4. Are you using both clients? Meant: are you using them in parallel on the same client? This doesn't work. Are you having two configs on the FW?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

+1 Allen Watyoka 11 months ago in reply to PhilippRusch

Hi Philipp

Thank you for all your inputs, i managed to sort out the issue by editing the host file in System32 folder

Kind regards

Allen
Cancel
Vote Up +2 Vote Down

Cancel