Can't access Admin GUI unless I SSH first

Hello Rich,

Thank you for contacting the Sophos Community.

What type of IPsec tunnel are you using? Policy route or Route Base?

What is the output of if you are using Route Base cat /proc/net/xfrm_stat

Regards,

Emmanuel,

I'm actually not using an IPsec tunnel as I was getting some terrible performance. However when I was using IPsec initially I was experiencing the same issue.

Rich

Hi Rich Grodzicki ,

Can you re-configure IPSec VPN and check with tcpdump and drop packet capture.Tcpdump will put on right direction where to look as per the traffic flow for WebAdmin console issue with IPsec. Suspecting issue with MSS value.

OR 

Check with SSL site-to-site option available if works.

Regards

How did you configure Administration -> Device access for HTTPS? Could you perhaps show a screenshot for that?

Hello Rich,

Thank you for the follow-up.

So, how are you accessing the Devices? 

Regards,

I've tried accessing the device both remotely through my VPN as well as locally.

However, I have solved the issue and it was my own doing. I had some advanced-firewall bypass-stateful-firewall-config directives in place to mitigate some asymetric routing issues that were not configured properly. After removing those directives I was able to access the WebGUI just fine. I then recreated the directives properly (and more specifically) and things continue to work. It seems bypassing the stateful firewall for a subnet also bypasses the WebGUI. Strange that SSH'ing to the host re-enabled the WebGUI.

Thanks for trying to help!

Hello Rich,

Thank you for updating the community on how you solved the issue.

Regards,