VPN global setting not applying changes

Hello,

Thank you for contacting Sophos community!

The change was applied from version 19:

community.sophos.com/.../sophos-firewall-ssl-vpn-ipv4-lease-range-changes-or-global-settings-update-gives-error-you-must-enter-a-network-ip-address-in-sfos-v19

Hello,

Did you got a chance to review on the information provided?

Hi

As I mention that he problem is that its not applying the changes.

Iam changing it from 10.81.234.5 to 10.81.234.0 after the update as i know this needs changing.

All is does after pressing apply..it just does the circle thingy and doesnt say changes applied successfully. and the window is still open.

I have no choice then to close the global setting window i have to press the cancel tab. As the apply tab is not working.

I only have 2 Firewall giving me this issue from the 11 firewalls i have managing.

Hello,

Kindly DM me with the firewall access ID.

Hello,

I am unable to send message. Kindly allow connection so that we can discuss over chat.

Hello,

Thank you for sharing the details over chat.

We tried applying the settings and it was failing without any error message. We collected the CSC and SSLVPN logs which helped identify the cause.

ESSAGE Aug 28 06:04:51Z [sslvpn_global_settings:17825]: opcode 'sslvpn_global_settings': time taken: 0.443755318 seconds with return status: '500'
DEBUG Aug 28 06:04:51Z [worker:17825]: {"response":{"method":"opcode","name":"sslvpn_global_settings","version":"1.14","type":"text","length":104,"data":{ "statusmessage": "Default CA is not configured", "invalidparams": [ "perusercert" ], "status": "501" },"statusCode":500,"statusStrlen":2,"statusString":"OK"}}
DEBUG Aug 28 06:04:51Z [worker:17825]: # OPCODE Exited: 'sslvpn_global_settings' with Status: '500'

It was observed that the Default CA was not filled and hence it was failing to save the settings. We asked to fill the default CA and later we managed to save the SSL VPN settings.

Hello,

Thank you for sharing the details over chat.

We tried applying the settings and it was failing without any error message. We collected the CSC and SSLVPN logs which helped identify the cause.

ESSAGE Aug 28 06:04:51Z [sslvpn_global_settings:17825]: opcode 'sslvpn_global_settings': time taken: 0.443755318 seconds with return status: '500'
DEBUG Aug 28 06:04:51Z [worker:17825]: {"response":{"method":"opcode","name":"sslvpn_global_settings","version":"1.14","type":"text","length":104,"data":{ "statusmessage": "Default CA is not configured", "invalidparams": [ "perusercert" ], "status": "501" },"statusCode":500,"statusStrlen":2,"statusString":"OK"}}
DEBUG Aug 28 06:04:51Z [worker:17825]: # OPCODE Exited: 'sslvpn_global_settings' with Status: '500'

It was observed that the Default CA was not filled and hence it was failing to save the settings. We asked to fill the default CA and later we managed to save the SSL VPN settings.

Thank you for the remote support and helping to drill down the issue.

By setting up the Default CA, The SSL vpn global setting applied the changes successfully.

Razif Bahsir Could you let us know if it was a migration plus backup/export scenario in this case ?!