Sophos Connect 2.3 MR1 iPSec DNS problems but SSL OK

Hi StefanS,

Thank you for reaching out to Sophos Community. 

To verify, do the IPsec DNS settings change after the update? And in comparison with the SSL VPN DNS settings

I recommend creating a support case and kindly sharing it here since the issue occurs upon firmware upgrade. This will allow us to check this further.

Hi Erick,
Thank you for your answer.
The DNS settings for remote IP-Sec are correct.
I will open a ticket for this problem as you recommended.

Case ID: 07421499

Hi StefanS 

We are trying to reproduce this in our lab and we will come back with an update soon this topic.

Hi StefanS 

What is the Windows version that you are on ?

Is the Windows version(10 or 11), when you were on SFOS version v19.5MR1 ??

Is the DNS entry populated correctly when you were on v19.5MR1 ?

Please share the openvpn log from the SCC.

Hi Giridhar Katti 
the affected systems are Windows 10.
Out of about 60 systems, the upgrade to v2.3.1, 2 systems were affected where the wrong DNS server is published with IPsec and on some other systems only the FQDN works, the hostname alone does not work here. Although the domain suffix was also specified in the IPsec profile.
In SFOS 19.5.1 and Sophos Connect v2.2.9 we only saw the FQDN problem sporadically, but not that the wrong DNS servers were transmitted completely.
What we can say in general is, that with SSL VPN the DNS resolution works very stable instead of IPSec.

For those 2 Win-10 machines, could you share the screen shot of the Network adapters ?