Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Connect 2.3 with disabled IPv6 component

- upgraded our Windows Connect Clients from 2.2.9 to 2.3
- when now connecting with SSL VPN:

The client is connected (all is working) but the state in Sophos Connect will not switch to connected and stays in "is connecting"... -> not possible to disconnect anymore.

Client Log:

(...)
2024-05-17 09:32:30 add_route_ipv6(::/1 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(8000::/1 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(::/3 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(2000::/4 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(3000::/4 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(fc00::/7 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 Initialization Sequence Completed
2024-05-17 09:32:30 MANAGEMENT: >STATE:1715931150,CONNECTED,ROUTE_ERROR,192.168.50.6,[SSL VPN Gateway IP],443,,,2001:db8::5

- we have the problem on ANY our clients



Edited TAGs
[edited by: emmosophos at 4:53 PM (GMT -7) on 22 May 2024]
Parents
  • Can you share your SSLVPN profile in SFOS? 

    __________________________________________________________________________________________________________________

  • Those object in network, could you give us an overview about those elements. It looks like, some of those routes are off for Connect. 
    Could you give us also the log of a successful 2.2 connect client?

    __________________________________________________________________________________________________________________

  • - just my internal /24 remote networks that are permitted (no changes made since upgrade)
    - with 2.29 same config, same client, same local network -> working -> LOG:

    (...)
    2024-05-17 12:21:18 add_route_ipv6(::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(8000::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(::/3 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(2000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(3000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(fc00::/7 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    2024-05-17 12:21:18 Initialization Sequence Completed
    2024-05-17 12:21:18 MANAGEMENT: >STATE:1715941278,CONNECTED,SUCCESS,192.168.50.68,[VPN GW address],443,,,2001:db8::4000:0:0:3

Reply
  • - just my internal /24 remote networks that are permitted (no changes made since upgrade)
    - with 2.29 same config, same client, same local network -> working -> LOG:

    (...)
    2024-05-17 12:21:18 add_route_ipv6(::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(8000::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(::/3 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(2000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(3000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(fc00::/7 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    2024-05-17 12:21:18 Initialization Sequence Completed
    2024-05-17 12:21:18 MANAGEMENT: >STATE:1715941278,CONNECTED,SUCCESS,192.168.50.68,[VPN GW address],443,,,2001:db8::4000:0:0:3

Children