This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

cannot connect via ssl vpn

Hi

Since the upgrade to ver SFOS 19.5.3 MR-3-Build652, all the users cannot connect via vpn.
3 customers with
Sophos FW XGS 3300 cluster
Sophos FW XGS 2100cluster
Sophos FW XGS 116

The error is:
ssl vpn error:0x20000000

scgui.log
2023-10-04 12:39:56PM [39076] inf Sophos Connect version: 2.2.90.1104
2023-10-04 12:39:56PM [39076] inf strongSwan version: 5.9.5
2023-10-04 12:39:56PM [39076] inf OpenVPN version: 2.5.6.0
2023-10-04 12:39:58PM [39076] dbg Please enter user credentials
2023-10-04 12:40:13PM [39076] inf Establishing connection 37.142.122.154
2023-10-04 12:40:27PM [39076] dbg SSL VPN error: 0x20000000
2023-10-04 12:44:27PM [39076] inf Removing connection 37.142.122.154
2023-10-04 12:44:27PM [39076] inf Removed connection 37.142.122.154
2023-10-04 12:44:41PM [34836] inf Sophos Connect version: 2.2.90.1104
2023-10-04 12:44:41PM [34836] inf strongSwan version: 5.9.5
2023-10-04 12:44:41PM [34836] inf OpenVPN version: 2.5.6.0
2023-10-04 12:44:45PM [34836] dbg Please enter user credentials
2023-10-04 12:45:05PM [34836] inf Establishing connection 37.142.122.154
2023-10-04 12:45:19PM [34836] dbg SSL VPN error: 0x20000000

Steps that I did
If your issue can be replicated, provide detailed how-to steps on how Sophos can reproduce, add any relevant screenshots, and mention if a 3rd party software/hardware is involved
I checked the time. it was ok, but same error
I checked the otp. it was ok, but same error
I import the configuration again. same error
I uninstall and reinstall the vpn agaent. same error.

Thanx

Shay

This thread was automatically locked due to age.

0 Raphael Alganes over 2 years ago

Hello Shay,

Thanks for reaching out to Sophos Community.

Could any of the suggested answers on the past thread here with the similar case be of help to you case? Connect Client 2.2.90.1104 SSL VPN error: 0x20000000 / 0x0000274D

Regards,

Raphael Alganes
Global Community Engineer, Support & Services
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The award-winning home for Sophos Support videos! - Visit Sophos Techvids
- 0 Shay Hanya over 2 years ago in reply to Raphael Alganes
  
  Hi
  
  It didnt help.
  
  I opened a support case.
  
  Shay
  - 0 Raphael Alganes over 2 years ago in reply to Shay Hanya
    
    Thanks for letting us know. I found the case under your account/email registered on Community and there should be a troubleshooting scheduled earlier with the assigned engineer. I referred this community post as well on your ticket and the past thread that we suggested but didn't work.
    
    Raphael Alganes
    Global Community Engineer, Support & Services
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the 'Verify Answer' button.
    
    The award-winning home for Sophos Support videos! - Visit Sophos Techvids
  - 0 Shay Hanya over 2 years ago in reply to Raphael Alganes
    
    Hi
    
    Someone from Sophos support connect and try all kind of tests.
    
    At the end took wireshark pcap.
    
    Shay
  - 0 Erick Jan over 2 years ago in reply to Shay Hanya
    
    Hi Shay,
    
    Thank you for sharing the update, upon checking case 07047541. The case handler will be checking the logs collected and will further update.
    
    Erick Jan
    
    Global Community Engineer, Support & Services
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the 'Verify Answer' button.
    
    The award-winning home for Sophos Support videos! - Visit Sophos Techvids
  - 0 Erick Jan over 2 years ago in reply to Erick Jan
    
    Hi Shay,
    
    Upon checking the update of your case, there was no follow-up from your side.
    
    The case handler requests another test to further isolate the issue with different environments.
    
    Erick Jan
    
    Global Community Engineer, Support & Services
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the 'Verify Answer' button.
    
    The award-winning home for Sophos Support videos! - Visit Sophos Techvids
0 MM1 over 2 years ago

Same error here. Cannot connect via Sophos Connect Client 2.2.90.1104 and OpenVPN profile to Sophos Firewall SFOS 19.5.3 MR-3-Build652

- Time is in sync (Firewall and Client, community.sophos.com/.../connect-client-2-2-90-1104-ssl-vpn-error-0x20000000-0x0000274d)
- OTP turned off for testing
- Imported already new config-file (tried both Windows and Android variants)

...but with native OpenVPN-Client the connection works! Is there an update for Case 07047541? Otherwise i will open another case.

Thanks
- 0 Erick Jan over 2 years ago in reply to MM1
  
  Hi MM1,
  
  I recommend contacting Sophos Support to create a case and kindly share the case# here.
  
  Erick Jan
  
  Global Community Engineer, Support & Services
  Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
  If a post solves your question, please use the 'Verify Answer' button.
  
  The award-winning home for Sophos Support videos! - Visit Sophos Techvids
  - 0 Erick Jan over 2 years ago in reply to Erick Jan
    
    Hi,
    
    As per the update, it was agreed to be closed, and will re-open a case once available.
    
    Erick Jan
    
    Global Community Engineer, Support & Services
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the 'Verify Answer' button.
    
    The award-winning home for Sophos Support videos! - Visit Sophos Techvids