Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • SSL-VPN switch from TCP to UDP

    Hi folks, we are currently in the rollout of SSL-VPN Configurations and noticed performance issues at users which are using LTE Internet connections with latency. So we want to improve performance by switching from tcp to udp at the sophos firewall…
  • Make SSL VPN faster

    Hi Sophox XGS 136 1 GBit/s Network Connection Firewall Network 100 MBit/s @ my home Speedtest from my home pc: ping 8, jitter 0, download 97.9 Mbps, upload 112.6 Mbps Speedtest from server: ping 2, jitter 1, download 939.8 Mbps, upload 946…
  • SSL tunnel no internet access

    Hello, We would need a specific user to connect SSL tunnel client and access internet troughtout the sophos so that he can have the public Ip from the company. I've created an SSL VPN and set the tunnel access as "Use as default gateway", created…
  • SSL VPN Auto connect

    After setting up the auto connect on a windows 10 machine I receive access to c:\program files (x86)\sophos\connect was denied. I have tried running with admin rights and get the same error. Can someone provide a resolution to this?
  • SSL VPN

    Hi !! im having a problem whit my SSL VPN´S, i have my SSL VPN whit the "USE as Default gateway option on" In my NAT rules i Have my SSL VPN doing MASQ to original, and in firewall rules i have permitid the SSL VPN to access my LAN´S and the WAN on…
  • SNMPTrap VPN SSL real public client ip address

    Hello, We are monitoring VPNSSL for security purpose with snmptraps. It's working, but in the text send in the trap by the sophos firewall, we don't have the real public client ip address. Here is an example : 20230308.100302 UDP: [XXX.XXX.XXX…
  • SSL VPN Static IP address results in route issues.

    Hello there, When i have the static IP Address disabled in my SSL Global Config it works fine, the firewall can reach all the devices connected through VPN. The issue comes when I enable the Static IP Address in SSL VPN Global Config, When I assign…
  • SSL VPN from both WAN Sophos XG

    Hi, first of all is it possible to use the internet on both wan ports? Like combine? Secound, would it possible to combine both wan ports for ssl vpn? We have two providers which give use each 50mbit/s uploud, and sometimes we need more for remote…
  • SSL vpn connection reset by gatway

    I am facing problem to conect ssl vpn through windows 10 only two system when i was connection network connected successfully but when i try to surfing internet then....give me error "your conmection reset by "ip address" default gateway i will also scan…
  • Apply policy for VPN Users

    Hello I have sophos xg 210 version 19.5 and i want to block social media for users how use ssl remote access sincerly
  • SSL VPN SOPHOS XG 19.5 Build 197

    Hey Guys, I have followed the guides for creating an SSL-VPN that authenticates through Active Directory. When I have my laptop internal to the network and initiate a VPN connect it works fine. Connection is established. The logs show this. However…
  • Assigning static ip to SSL VPN users results in Authentication failed when switching networks

    Just upgraded from 19.5.0 GA-Build197 to 19.5.1 MR-1-Build278 in hopes that this would be resolved. The issue is mobile phones are unable to reconnect the SSL VPN when they roam between different networks, eg from a local wifi to mobile isp and vice…
  • Client VPN SSL and Static Route

    Good morning, on an XG router I have created VPN-SLL users, everything is ok, the VPNSSL users access the client LAN, but I can't reach a static route defined on the XG router, I checked the FW rules, the accessible networks in the VPN Policy, etc.…
  • Installing Tunnelblick on mac to connect to XGS126 SLL VPN

    I am trying to help a mac user to connect to our SSL VPN. Using the Sophos client connect app. It is not supported on mac according to sophos support. Sophos support sent me instructions on setting up Tunnelblick however as is often the case, the instruction…
  • DNS issue after a short period - SSL VPN

    Hi, I have a user using SSL VPN (Remote Access) to connect to the office. This worked good over the last months, but we're now having strange issues: After a short ( but undefined) period of time, he's unable to access any internal web resources…
  • SSL VPN to Sophos Connect Migration Anomalies; Some Resources Now Unavailable

    Hi Sophos Community, We've switched from using the SSL VPN client to Sophos Connect. All configurations used for SSL VPN via the old client are now used with Sophos Connect. For the most part everything has gone smoothly, only now some actions…
  • SSL VPN GLobal Settings dosen't save

    Hello, I have a Problem with Global Settig update , save. See my attachment. What IP-Address is it ??
  • SSL VPN used in a VPN gateway, trouble accessing remote network from other networks going through the gateway. Any remedy?

    A remote vendor used his SSL VPN connection (login and OVPN file) in a VPN gateway. His goal is for various machines on multiple networks on his end to access my network through this VPN gateway. The vendor is able to reach my network from the gateway…
  • Configuring dual WAN IP with an SSL VPN client

    we have to Dual WAN with static IP- refer to below screenshot 118.189.XXX.XX is the primary WAN IP address. 165.21.XX.XX is the secondary WAN IP address. The problem is that SSL VPN is configured with the IP address 118.189.XXX.XX (Primary WAN)…
  • Create SSLVPN user certificates without user portal

    Hi, is there any way to generate the "per user certificates" used for SSLVPN without logging in to the userportal as an admin? Users are AD users. We have a big SSLVPN rollout and this would help us to do this much faster. Regards, Sebastia…
  • Firewall single Official IP with NAT causes SSLVPN not to work

    Hi everybody, I have done an Update from SFOS 18 to SFOS 19 and since the Update I am not able to connecto to SSLVPN any more. In CLI I can see that all incomming Packets are dropped for SSLVPN when running ( drop-packet-capture "port 1194"). But…
  • When will SSL VPN Users need to re-download configs?

    Hello, we are currently testing 2FA with our XG v 19.0.1 and also some VPN changes. Now every user has to download his personal config file from the user portal so he can connect. Is there a KB or something else where it is written WHICH option(s…
  • Use Remote Access SSL VPN to reach 4 different internal networks

    Hello, We convert the configuration from UTM 135 to XGS 136 and we have one Problem with Remote Access SSL VPN and sNAT. With the UTM we have a C2S SSL VPN for Homeoffice users to the main office (1). The main office has 3 additional S2S connections…
  • SSL VPN Routing Questions

    So I have SSL VPN setup and working. I need to know if there is a way to create specific routes for VPN traffic. We have an internal application that resolves to a Public Range, but our internal router has a route statement to send that instead to an…
  • Sophos XGS SSL-VPN .ovpn files wrong output

    Dear all, We are struggling with the generated .opvn Connection files users can download from the user portal on the WAN ports for VPN we do not know and cannot find it in the online help, how they are created. our setting: XGS 3100 Firewall, Firmware…