IPSEC/L2TP with Radius and CVE-2024-3596

Hi Dieter ,

Thank you for reaching out to the community, looks like this is already being investigated - NC-139018, could you please log a service request ?

Hi Vivek,

we have the same issue with our Sophos Firewalls and Windows NPS Server with RADIUS authentication. With installed Windows Update KB5040437 (Server 2022) and KB5040430 (Server 2019) RADIUS authentication is not working. As a workaround I deinstalled the Update in the NPS Server and it is working again. 

I will also open a ticket for this issue. 

BR,

Ben

We also experienced this issue with Server 2022 and the KB5040437 update. Existing users could still authenticate. New users could authenticate but the Group name attribute wouldn't be parsed.

Any updates on this?

We have a same issue with SSL VPN and RADIUS authentication. We removed the July Windows patch from the affected servers, after that authentications work fine. Do you have any update about this topic? 

Same problem here. Any updates on this?

I've opened a case with Sophos. The issue is escalated to the development team. I will get an update by 9th of aug.

Hello M B9 ,

Kindly raise the support case. Our team can apply work around.

Ok, i did with our partner account.

Hello Jaspert,

May you share with us the caseID, so we can track progress on our end. 

Thank you