Latest iOS OpenVPN update breaks SSL VPN

Hi FrankWest Thank you for reaching out to the Sophos community team.

Please review the Product team comment/information given in the below thread to get more information on the raised question:

OpenVPN SSL VPN Configuration gives error: Unsported Options "route delay 4"

Hi,

so effectively you state that you don't support 3rd party clients? If this issue was known 2 months ago, why wasn't there any headsup? Apparently OpenVPN now started rolling out the ios/ipadOS update which breaks the SSL VPN.

Hi FrankWest  Product team is working on this one and for the time being below workaround is available:

The possible workaround is to comment/remove the “route-delay 4” field from the Ovpn files if one is using OpenVPN3.4.

OR

To use OpenVPN2.x clients  openvpn.net/.../

Hi, but you can't edit the openvpn config in the iOS/iPad OS client and when you download it from the user portal, you get the version with the unsupported option still active. And you also can't download older versions of the app from the Apple appstore.

You keep posting this as the answer, but it isn’t since you cannot download older versions of the client on iOS. Also, when visiting the user portal for downloading the OpenVPN comfig file, you cannot edit it on iOS. You have to transfer the file to a desktop computer, edit it and put it back on the mobile device. Doing this by email is a security issue.

Hi FrankWest  Yes I do agree and understand the challenges highlighted above, I would suggest opening a support case to work with the support team to see/confirm the other possibilities in terms of a workaround or fix for this reported issue. 

This is an crtitical issue about OpenVPN XGS/SG setup, please have a fix.

This works, quoted from the other thread.

Quick and dirty fix:

• SSH login to Sophos XG
• open an advanced shell (5 -> 3)
• vi /content/sslvpn/client-config-template.ovpn
• scroll down to "route-delay 4"
• press i for insert mode
• add ";" in front
• ESC -> :wq

After the change, you can finally download working .ovpn-configuration files for OpenVPN 3.4 in the XG user portal again.

Why do you keep proposing your post as the answer? Even if I reject is as answer, you again and again post it as the answer, you did it 5 times now. Your post isn't the answer to my issue as I pointed out already. The correct answer is my post above in green.

Hello Frank,

The answer mentioned by Vishal is marked as a "Suggested" answer, which is correct since he is providing a suggestion to your question. As you can see you were able to resolve your question after following Vishal Suggestion to the link he provided.

Your last answer is a "Verified" answer because it solves your question.

Regards,