Sophos Connect - SSL VPN not working

Question

We are having an Issue with the VPN Connection of a single Client. Users are authenticated via AD, the Sophos Connect Client and Config file was downloaded from the Sophos VPN Portal. When starting the VPN Connection it loads forever until it eventually times out. Only a single Client is affected all other Users have no issues.

Log contained wrong information
[edited by: Lennart Siekmann at 2:47 PM (GMT -7) on 27 Mar 2024]

Vivek Jagad · Answer

Hello Lennart Siekmann , Thank you for reaching out to the community, take the packet capture on the Port 4439. If the packet capture shows that SSL VPN traffic is forwarded matching any rule ID, its most likely to be a DNAT rule with any service or SSL VPN port. DNAT rule has higher precedence to any other rule, due to which SSL VPN traffic which is destined to the firewall is forwarded to internal host matching DNAT rule. Ensure you do not have DNAT rule with ANY service. If there is a DNAT rule with the same port, either change the DNAT rule port or SSL VPN port.

Erick Jan · Answer

Hi Lennart, 
 That is great to hear. We can conclude that the issue only exists in the said workstation and not on our Firewall. 
 Based on the logs comparison. I suggest checking port 4439 for the non-working device to see if it&rsquo;s open or blocked.

Sophos Connect - SSL VPN not working

Top Replies