This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC/L2TP with Radius and CVE-2024-3596

Dieter 4 months ago

Hello,

with the patch from Microsoft KB5040434 07/2024 there are problems with Radius authentication for L2TP.

Without the patch, the client connection works without any problems.

What can we do?

Best Regards

Dieter

This thread was automatically locked due to age.

Top Replies

Dieter 3 months ago +4 verified

Hello, our problem with Radius authentication with L2TP has been solved by Sophos. Many thanks for the great support. Please create a ticket with Sophos and include NC-139018. Thanks & Regards

+1 Vivek Jagad 4 months ago

Hi Dieter ,

Thank you for reaching out to the community, looks like this is already being investigated - NC-139018, could you please log a service request ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Ben@Network 4 months ago in reply to Vivek Jagad

Hi Vivek,

we have the same issue with our Sophos Firewalls and Windows NPS Server with RADIUS authentication. With installed Windows Update KB5040437 (Server 2022) and KB5040430 (Server 2019) RADIUS authentication is not working. As a workaround I deinstalled the Update in the NPS Server and it is working again.

I will also open a ticket for this issue.

BR,

Ben

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaspert 3 months ago in reply to Vivek Jagad

We also experienced this issue with Server 2022 and the KB5040437 update. Existing users could still authenticate. New users could authenticate but the Group name attribute wouldn't be parsed.
Cancel
Vote Up 0 Vote Down

Cancel
0 Waylon Brown 3 months ago

Any updates on this?
Cancel
Vote Up +1 Vote Down

Cancel
0 Gabor Kovacs 3 months ago

We have a same issue with SSL VPN and RADIUS authentication. We removed the July Windows patch from the affected servers, after that authentications work fine. Do you have any update about this topic?
Cancel
Vote Up 0 Vote Down

Cancel
0 M B9 3 months ago

Same problem here. Any updates on this?
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaspert 3 months ago

I've opened a case with Sophos. The issue is escalated to the development team. I will get an update by 9th of aug.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mayur Makvana 3 months ago in reply to M B9

Hello M B9 ,

Kindly raise the support case. Our team can apply work around.

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 M B9 3 months ago in reply to Mayur Makvana

Ok, i did with our partner account.
Cancel
Vote Up 0 Vote Down

Cancel
0 Raphael Alganes 3 months ago in reply to Jaspert

Hello Jaspert,

May you share with us the caseID, so we can track progress on our end.

Thank you

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel