This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN Auth-Failed Error

I have several people in the office that are using the SSL client to connect from home there are about 10 working users. However 2 out of 4 new users have an error connecting to the SSL with only an error message "Auth-Failed". 1 of the 4 was having the same issue but it is working now (not sure what changed)

We are using AD authentication for the VPN access. Each user can login into the user portal using their AD username and password. They can download and install the client and configuration.

If I load my SSL config on the windows machine, I can log into the VPN, but the affected user cannot.

I have STAS connected and working.

I have tried to reset the users windows password, deleted the user from the router (it gets found again from the AD) and have verified that he exists in the VPN user group.

What troubleshooting steps can I take from here? Thanks for the input.

This thread was automatically locked due to age.

Parents

0 sachingurung over 8 years ago
Hi Neal,

Please navigate through :

System

Authentication

Authentication Services

Please verify if AD server is configured in SSL VPN Authentication Methods. PFA screenshot

Authentication Server List displays all the configured servers while Selected Authentication Server list displays servers that will be used for authentication when user tries to login.

Thanks
Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 NealBellamy over 8 years ago in reply to sachingurung

Here is the Auth Services Screen. Both Auth Servers show "Device - AD Server connectivity test successful" when tested
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 NealBellamy over 8 years ago in reply to sachingurung

Here is the Auth Services Screen. Both Auth Servers show "Device - AD Server connectivity test successful" when tested
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 lferrara over 8 years ago in reply to NealBellamy

Neal,

what do you see from Log Viewer Authentication Log?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 NealBellamy over 8 years ago in reply to lferrara

Luk, The log shows:

SSL VPNAuthentication FAILED [USERNAME] [IP Address] Local,AD.
Cancel
Vote Up 0 Vote Down

Cancel
0 studyaid over 4 years ago in reply to NealBellamy

Under Authentication >> Servers I had an issue after I renamed my original "Domain Name *" by adding .com when I did not have it initially. The previous client config no longer matched the Sophos server config. I ended up putting the original name back and it worked without downloading a new client setup file.

The config original name was username@domain_ssl_vpn_config vs username@domain.com_ssl_vpn_config
Cancel
Vote Up 0 Vote Down

Cancel