XGS4500 (SFOS 20.0.2 MR-2-Build378) after Firmware update from 20GA to MR2 stays dead

Hello,

Thank you for contacting Sophos Community.

Could you please share us the sslvpn.log while starting the service?

You can collect using below:

tail -f /log/sslvpn.log

Do you have any SSLVPN remote access policy or site to site tunnel configured and enabled ? If not, sslvpn service stays down.

Hello Nikhil,

yes we have two different IPsec Site-to-Site configurations.
1. with connection type = Site-ToSite
2. with conneciton type = Tunnel interface

We got a test policy for sslpvn but its not enabled and we dont use it.

2024-08-10 10:07:59Z [19479] TCPv6_SERVER link remote: [AF_UNSPEC]
2024-08-10 10:07:59Z [19479] MULTI: multi_init called, r=256 v=256
2024-08-10 10:07:59Z [19479] IPv4 pool size is too small (1), must be at least 2
2024-08-10 10:07:59Z [19479] Exiting due to fatal error
2024-08-10 10:07:59Z [19479] Closing TUN/TAP interface
2024-08-10 10:07:59Z [19479] /sbin/ip addr del dev tun6 10.242.2.249/30

So I assume its due to an inactive sslvpn configuration right?
If I delete it or disable the service then it should fine I guess

Hello,

I believe you must increase the lease range:

2024-08-10 10:07:59Z [19479] IPv4 pool size is too small (1), must be at least 2
2024-08-10 10:07:59Z [19479] Exiting due to fatal error

Yes we had a wrong SSL VPN global setting.
Now the service is running again without errors.
Thank you

Hello,

Thank you for sharing the update and we are glad to know that the service shows running.