Sophos FW Unable to download ssl vpn configuration after v20 update

Question

Hello, i have 2 xgs 116 fw. After updating v. 20 i can't donwload vpn configurations from vpn portal. Error " Failed to download the file. If the problem persists, check with IT. " 
 Under Pattern updates page there is no version shows at SSLVPN Clients and no files under Content\sslvpn. 
 
 I tried to upload pattern update manually, it tried update / download files then failed.

Sreenivasulu Naidu · Accepted Answer

It seem to be a country specific packets being blocked that causes SFOS unable to reach up2date servers; if up2date servers are not reachable, the pattern updates fail for sslvpn templates and config generation fails. Same behaviour is seen with APU access where the packets are not reaching the server. This is not anything related to v20.

Sreenivasulu Naidu · Answer

Pls do below on your SFOS 
 nslookup xg-up2date-patterns.sophosupd.com 
 
 // use below command to manually download sslvpn_1.02_1.0.009.tar.gz.sig and look at the details printed on the console 
 curl xg-up2date-patterns.sophosupd.com/sslvpn_1.02_1.0.009.tar.gz.sig -O -v 
 
 // if the download is successful, check md5 of the downloaded file and it should match with the below md5 
 md5sum sslvpn_1.02_1.0.009.tar.gz.sig 
 44cb69ce7284316227eecad1babf3db8 sslvpn_1.02_1.0.009.tar.gz.sig 
 
 If there are issues with the download, check if dns service is running on SFOS 
 service -S | egrep 'bind|dnsd' 
 dnsd RUNNING 
 
 Or you can DM me, we can take a look at your SFOS over Zoom/Teams call.

Sophos FW Unable to download ssl vpn configuration after v20 update

Top Replies