This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 20.0.2 SSL VPN connection problem only on work laptop

Hey everyone,

I was recently given a SG115 firewall to mess around with and installed SFOS on it. While learning how to use it I've setup an SSL VPN connection that works on every computer except for my work laptop, which oddly enough is able to connect to other SSL VPNs on production Sophos firewalls. I can even connect to my test VPN using a VM on this laptop, but not outside of the VM.

What happens is Sophos Connect will establish a connection and then about 20 seconds later it will receive a connection reset from the gateway. It will then re-connect for a few seconds, get another connections reset and do this cycle about 4 or 5 times before giving up. This is a screenshot of what Sophos Connect tells me.

I'm not sure why this only affects my work laptop, but if anyone had any advice it would be super appreciated.

Thanks!

This thread was automatically locked due to age.

Top Replies

LuCar Toni 3 months ago in reply to FlashErickson +2 verified

Check the flow before that. It looks like the Client does not like the connection and sending the RST. Maybe the certificate is not ok. Please update to Sophos Connect 2.3 MR1, if not already done…

Parents

0 LuCar Toni 3 months ago

You need to perform a tcpdump or wireshark dump on SFOS on port 8443 and check, what you are seeing there. How to: TCPDump on XG

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 FlashErickson 3 months ago in reply to LuCar Toni

Sorry it took so long, but I was able to do a TCPdump and load it up into Wireshark and from what I can tell there is a packet that's causing the reset, but not too sure what to do about it. Here's a screenshot.
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni 3 months ago in reply to FlashErickson

Check the flow before that. It looks like the Client does not like the connection and sending the RST.

Maybe the certificate is not ok.

Please update to Sophos Connect 2.3 MR1, if not already done: Sophos Connect 2.3 MR1 Update Released

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel
0 FlashErickson 3 months ago in reply to LuCar Toni

Looks pretty standard before the reset, but I'll upload a screenshot of the whole capture, hopefully it's not too big and you can still read it. And good question on the certificate, I'm not entirely sure to be honest. But if it was a certificate problem, wouldn't that affect the other computers as well? Let me know if you'd like any screenshots for info on certificates.
Cancel
Vote Up 0 Vote Down

Cancel
0 FlashErickson 3 months ago in reply to LuCar Toni

Just for some added info, I'll upload the Windows Event Viewer warning as well, not sure if they're relevant, but I figure it couldn't hurt.
Cancel
Vote Up 0 Vote Down

Cancel
0 FlashErickson 3 months ago in reply to LuCar Toni

So turns out you were 100% correct. I revoked and then deleted the user certificate, downloaded a new VPN file and now it's working great. Thanks so much for your help on this!!! I'd been fighting this one for a while now, so I'm pretty happy to finally have it figured out.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 FlashErickson 3 months ago in reply to LuCar Toni

So turns out you were 100% correct. I revoked and then deleted the user certificate, downloaded a new VPN file and now it's working great. Thanks so much for your help on this!!! I'd been fighting this one for a while now, so I'm pretty happy to finally have it figured out.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data