Help! Firewall is "reachable" from Internet, but not able to connect to VPN or internal servers

Question

I am currently off site with no physical access to my firewall. 
 Firewall is reachable from outside, e.g. WAF port 443 gives answer to telnet, and in browser any configured site is reported as "503 Service unavailable". 
 Also SSL.-VPN port is listening on both external interfaces (cable modem and LTE modem) 
 However I cannot create a VPN connection. It is stuck with "Sending PUSH_REQUEST to server" and eventually times out. 
 SMTP port 25 is working and accepting connections. 
 
 What are my options, as user portal and admin portal is not reachable from internet without VPN? 
 I am on version 19.5MR3 and of course I havent changed anything in the config.

EdmundSackbauer · Accepted Answer

What service port do you mean? Authentication - Services: 
 "Master" is the external RADIUS Server. My expectation would be that if that is not available, at least local users are able to log on. But that ends also in a timeout. 
 I guess that is due to the Radius timeout I configured - its pretty long with 60 Seconds, to have some time to confirm with Duo Auth Proxy. 
 Possibly I just need to reorder the 2 auth sources and streamline the local user list. 
 
 I will have a look at central.

Erick Jan · Answer

Hi Edmund, 
 Thank you for reaching out to Sophos Community. 
 To verify, were you able to access the CLI via SSH/telnet? 
 
 Sophos Firewall: Unable to access the GUI 
 
 Was the firewall registered to Sophos Central? 
 
 Firewall Management

Help! Firewall is "reachable" from Internet, but not able to connect to VPN or internal servers

Top Replies