Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Can't download SSL VPN configuration files after updating to 20.0 MR-3

Hi everyone, hope all is well.

I recently updated some of my units (XG 106, XGS 107 and XG 210) to SFOS 20.0.3 MR-3 and now I can't download any of the SSL VPN configuration files. All three options give me the same error:


I checked under "Backup & firmware -> Pattern updates" to see if there was anything going on there and found that the "SSLVPN Clients" entry had a status of "Failed":


After searching around I came across a thread that seemed to match the issue I'm having:

Sophos FW Unable to download ssl vpn configuration after v20 update

Running one of the commands listed there (curl xg-up2date-patterns.sophosupd.com/sslvpn_1.02_1.0.009.tar.gz.sig -O -v) solved the "Failed" issue on the XG 210:


On the others it didn't work. And on the 210, even though the error was cleared, I still can't download the files.

What should I try next? I haven't rebooted the units yet (still waiting for a maintenance window).

Thanks.



Edited TAGs
[edited by: Erick Jan at 2:33 AM (GMT -8) on 7 Feb 2025]
  • Hello,

    Could you please share the below command output?

    #csc custom status

    Mayur Makvana
    Technical Account Manager | Global Customer Experience

    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question please use the 'Verify Answer' button.

    • Of course!

      From the 210 (SSLVPN Clients status is "Success"):

      XG210_WP03_SFOS 20.0.3 MR-3-Build427# csc custom status

      Fri Feb 7 10:24:22 2025
      Listerner is in UNFREEZED STATE
      Freeze INIT wait val : 10
      Freeze wait val : 900
      Opcode queue len : 50
      Service queue len: 50
      Freeze INIT timeout : Not effective Freeze timeout : Not effective
      HANDLE_STATE_CHANGE OPCODE RUNNING(2) ?:- 0
      HA is disabled
      Max static worker: 16
      Max dynamic worker: 16
      Max dynamic worker spawn last 24 hours: 0
      Dynamic worker cross limit in last 24 hours: 0
      Static worker cross limit in last 24 hours: 0


      Free Workers:
      601
      575
      554
      32060
      31732
      28765
      21046
      16602
      16601
      16600
      16596
      16594
      16593
      19725
      19718
      17205

      Busy service:
      vpnportal

      Service Queue of vpnportal:
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6

      XG210_WP03_SFOS 20.0.3 MR-3-Build427#


      From one of the XGS 107s (SSLVPN Clients status is "Failed"):

      XGS107_SN01_SFOS 20.0.3 MR-3-Build427# csc custom status

      Fri Feb 7 10:32:14 2025
      Listerner is in UNFREEZED STATE
      Freeze INIT wait val : 10
      Freeze wait val : 900
      Opcode queue len : 50
      Service queue len: 50
      Freeze INIT timeout : Not effective Freeze timeout : Not effective
      HANDLE_STATE_CHANGE OPCODE RUNNING(2) ?:- 0
      HA is disabled
      Max static worker: 16
      Max dynamic worker: 16
      Max dynamic worker spawn last 24 hours: 2
      Dynamic worker cross limit in last 24 hours: 0
      Static worker cross limit in last 24 hours: 1


      Free Workers:
      18630
      18536
      18465
      18464
      17982
      9670
      9213
      9212
      9208
      9205
      9204
      9203
      28587
      28586

      Busy workers:
      C_FLAG: 1-DB_CONTROL, 2-NO_WAIT
      R_FLAG: 1-DEBUG, 2-NO_SYNC
      PID OPCODE NAME C_FLAG R_FLAG EXEC_TIME
      17204 u2d_pt_installed 0x 0 0x 2 Fri Feb 7 10:30:29 2025
      17205 u2d_pt_installer 0x 0 0x 2 Fri Feb 7 10:30:28 2025

      Busy service:
      vpnportal

      Service Queue of vpnportal:
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6
      vpnportal:restart 6 ...
      XGS107_SN01_SFOS 20.0.3 MR-3-Build427#