SSL VPN Network Access

Hello there,

Thank you for contacting the Sophos Community!

When the user connects, can you see traffic arriving at the Sophos Firewall when the user is trying to access the resources if you do a TCPdump?

I was not able to find your Case ID under your account. Could you please share it?

Regards,

When you say you "quickly setup" that SSL VPN, did you rely on the generation of "automatic firewall rules" ?

Maybe this firewall rule doesn't fit anymore? Since the automatic rules are generated at the bottom of the fw rules list, maybe above there is another rule overriding it?

As a last thing, you could delete this user's SSL-VPN configuration and use the SSL-VPN configuration assistant again.

I have not performed a TCPDump as mentioned but this is weird. So I made a temporary user about 3 months ago to get my staff person connected while in another country, worked perfectly. When he got back I simply Disabled the account. Since they are making another trip I thought I will make a proper account and called it "secureuser"  and set it exactly as the previous disabled account. The account authenticates no problem but can't access the network resources. This bugged me so decided to make the original account active and test, worked like a charm. Both users are in the same VPN Grouping that I use in the firewall rule, maybe for whatever reason, Groups don't work or there is a bug, I'm now curious if I list the users individually if they both will work.

Under Match Known users on the VPN rule I did add the new user and still didn't work. Flippin weird.

Hello,

I would recommend you to do a Packet Capture from the GUI to confirm what Firewall Rule the traffic is using; most likely, it is using a different firewall rule than you expect.

Regards,

Sounds very logical, how would I setup such a test on packet capture, would it be just looking at port 8443?

I would do
host 10.182.10.10  and proto ICMP
(substitute accordingly to the IP given to the client)
Then try a Ping to the network you are trying to access

Now I didn't run a packet capture but inspecting the logs and running a filter by tun0 all my users are using the correct FW rule and Nat Rule.

So I don't normally use the assistant, I simply create a new user withe same setup as working VPN users.

I have yet to make a case EmmoSophos. Thank you