Latest iOS OpenVPN update breaks SSL VPN

Hi FrankWest Thank you for reaching out to the Sophos community team.

Please review the Product team comment/information given in the below thread to get more information on the raised question:

OpenVPN SSL VPN Configuration gives error: Unsported Options "route delay 4"

Hi,

so effectively you state that you don't support 3rd party clients? If this issue was known 2 months ago, why wasn't there any headsup? Apparently OpenVPN now started rolling out the ios/ipadOS update which breaks the SSL VPN.

Hi FrankWest  Product team is working on this one and for the time being below workaround is available:

The possible workaround is to comment/remove the “route-delay 4” field from the Ovpn files if one is using OpenVPN3.4.

OR

To use OpenVPN2.x clients  openvpn.net/.../

Hi, but you can't edit the openvpn config in the iOS/iPad OS client and when you download it from the user portal, you get the version with the unsupported option still active. And you also can't download older versions of the app from the Apple appstore.

You keep posting this as the answer, but it isn’t since you cannot download older versions of the client on iOS. Also, when visiting the user portal for downloading the OpenVPN comfig file, you cannot edit it on iOS. You have to transfer the file to a desktop computer, edit it and put it back on the mobile device. Doing this by email is a security issue.

You keep posting this as the answer, but it isn’t since you cannot download older versions of the client on iOS. Also, when visiting the user portal for downloading the OpenVPN comfig file, you cannot edit it on iOS. You have to transfer the file to a desktop computer, edit it and put it back on the mobile device. Doing this by email is a security issue.

Hi FrankWest  Yes I do agree and understand the challenges highlighted above, I would suggest opening a support case to work with the support team to see/confirm the other possibilities in terms of a workaround or fix for this reported issue. 

This is an crtitical issue about OpenVPN XGS/SG setup, please have a fix.

This works, quoted from the other thread.

Quick and dirty fix:

• SSH login to Sophos XG
• open an advanced shell (5 -> 3)
• vi /content/sslvpn/client-config-template.ovpn
• scroll down to "route-delay 4"
• press i for insert mode
• add ";" in front
• ESC -> :wq

After the change, you can finally download working .ovpn-configuration files for OpenVPN 3.4 in the XG user portal again.

Thanks really much. Worked like a charm.

Not sure what i'm doing wrong.

I've added the comma in front of route-delay 4:

;auto_connect
,route-delay 4
verb 3

but still getting error after i download new config to iphone.

i think i see my error... semi-colon, not comma

semi-colon didn't do it, also tried "#" without success.

What am i missing?

Hey Allan Hamner ,

 Enter the following line: vi /var/confd/res/openvpn/client.ovpn-default

 The above command will open the file called client.ovpn-default in the vi editor

Press the Down Arrow in your keyboard until you see and the pointer is at "route-delay 4",

 Press the letter "i" on your keyboard to enter INSERT mode in vi, and press the semicolon symbol (;) on your keyboard

Press the key ESC on your keyboard followed by :x or :wq (you should see the :X on the left bottom corner of your screen

Thank you Vivek.

I've confirmed success/functionality on both XG & utm9.

Thank you for the update Allan Hamner  we are glad this helped !