Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • NAT Remote Access VPN IP to internal IP

    Good Day, Our Remote Access SSL VPN IP's are on a different subnet. Is there a way I can NAT it to our Internal IP's? Currently they get 10.81.234.x/24 Would like to NAT the IP to 10.0.0.x/16
  • windows 11 Sophos Connect client show disconnected but is connected

    Hi, We are experiencing an issue with certain Sophos connect clients on windows 11, most of the windows 11 machine work fine , except for 2 or 3 random machines. When connecting the sophos connect client, it does not show connected , only the connect…
  • Compression "comp-lzo no" in openVPN client file not supported

    Hi there. Using XG Home with latest SFOS 19.5.3 MR-3-Build652 exporting the openVPN SSL file and using it on iOS 17.0.3 openVPN App V. 3.4.0. In advanced settings of the openvpn is an option of recommended secuity level. If I choose it, I get an error…
  • Sophos SSL VPN - Severe performance issue after upgrade to XGS-2100 SFOS 19.5.3

    We previously have XG-210, SFOS 19.5.2 but due to EOL on XG-210, we are forced to upgrade to XGS-2100. We are now running the latest SFOS 19.5.3 on the new XGS-2100, and all SSL VPN users are experiencing severe performance issue. The issue is impacting…
  • SSLVPN - Surface Pro

    Sophos Connect vpn client on Microsoft Surface with ARM cpu Is this going to occur sometime this century, or should clients stop buying Sophos if they want to use Surface Pros?
  • SSLVPN won't connect on devices that has IPv6

    Hi, I have Sophos XG on ver 19.5. I noticed that when my device is on mobile data which has IPv6 and IPv4 of 172.56.x.x, the VPN won't connect. There are also no logs on the firewall so it was never reached to it. I do not have IPv6 rules and SSLVPN setting…
  • Unable to Connect VPN due to SSL CA Certificate Expired

    Hello. We have a client using Sophos Firewall installed in a VM. ( Firmware 17.5.12) They are have expired SSL CA Certificate and when they applied new SSL CA Certificate, it shows error and VPN users unable to connect. So, now they are using expired…
  • Latest iOS OpenVPN update breaks SSL VPN

    Hi, after updating to the latest OpenVPN app (v3.4.0) on iOS/iPadOS, you are unable to establish an SSL VPN connection to Sophos XG. An error is shown about an unsupported option in the config file. Our vendor found out that removing the 'route-delay…
  • Remote Access VPN (SSL) over IPSec

    Hi all, i have the following issue and hope that someone can give me a hint or two: We're using a remote access connection (SSL VPN) to our Sophos XG. On the Sophos XG, we have an IPSec tunnel to another router (pfsense). Both work great. Now, we…
  • cannot connect via ssl vpn

    Hi Since the upgrade to ver SFOS 19.5.3 MR-3-Build652, all the users cannot connect via vpn. 3 customers with Sophos FW XGS 3300 cluster Sophos FW XGS 2100cluster Sophos FW XGS 116 The error is: ssl vpn error:0x20000000 scgui.log 2023-10-04 12:39:56PM…
  • Ssl vpn Remote access

    I have sophos firewall run ssl vpn remote access , when pc connect it can see all local network behind firewall but when connect tplink router vpn by open vpn I can't see behind the firewall but connected to firewall as vpn gateway and reserve ip add…
  • Not able to connect SSL VPN

    Hello, I would be needing help with SSL VPN. I have configured the SSL VPN on our XG Firewall and I downloaded the client and when I am trying to connect to the VPN, I am getting an error in the event " Received connection reset from Gateway: IP Port…
  • Very Slow Inbound Traffic

    Hi, I have a 500 mb/s (both directions) on my XGS2300. I cannot seem to get a remote access SSL VPN connection to go above 15mb/s for sending data into the gateway from a VPN client on the WAN. Outbound speed is about 350-375. When running a speedtest…
  • IPsec SSL subnet won't communicate over vpn after inactivity

    Hello, We have a IPsec VPN setup to Azure. Behind the Sophos side we have local subnet x.x.x.x and SSL subnet y.y.y.y, and on the Azure side we have z.z.z.z. The tunnel doesn't disconnect but the Y subnet fails to communicate with Z after some time…
  • Intercept X and VPN Access

    Hi, is it possible to configure a client having Intercept X installed to allow connecting to the sophos gateway via VPN only when Intercept X is running on that client? Can this be configured somewhere? This is a form of NAC (Network Access Control…
  • MAC PC SSLVPN config file error

    Operating System Version. Mackintosh – Ventura 13.4
  • DNS not resolving through SSL VPN for iOS on XG SFOS 19.5.2 MR-2-Build624

    Windows clients work fine and can resolve domain.server.local names just fine over vpn. ios clients on local wifi resolve fine. ios clients on vpn (openvpn) cannot find domain.server.local domain is set in vpn settings, dns server ip is set in vpn…
  • 1 Domain for 2 links for SSL VPN use

    Hi All, I was wondering is there a way to have 1 Domain used for SSL VPN connection . So to explain better. You can have 1 Domain that gets resolved to the external IP interface of the device. But lets say we have 2 external IPs, Is there a…
  • Sophos Remote Access SSL VPN received reset connection from server

    Hello everyone, I have XG2300 SFOS 19.5.2 MR-2-Build624 and I have an issue with the Remote access SSL VPN connection. The issue is that a user connected via Remote SSL VPN receives a reset connection from server at random. I have tried to resolve…
  • Remote access VPN for Linux Machines

    Hi All, I have Sophos XG box and I am interested in utilizing the remote access VPN functionality within a Linux environment. Could you kindly inform me if the Sophos XG Box supports remote access VPN for Linux? Moreover, if you have any resources…
  • Sophos Connect OpenVPN service not available - Windows 7

    Hello! So we recently did our cut over from our old firewalls to our new Sophos firewalls. Currently seeing an issue with a laptop that initially said "Service Unavailable" So I went into the services and saw that the Sophos Connect service wasn't enabled…
  • Allow UTM9 ssl vpn user to get access in XGS Firewall through IP Sec tunnel

    Dear SupportTeam, I am trying to allow UTM9 ssl vpn user to get access to the XGS Firewall through the existing IPsec tunnel, Can someone help me with how I Can do that Best Regards Nazir Heravi
  • Remote SSL VPN Problem

    Hello, I made a remote ssl vpn connection with the client , I used this link to make it https://doc.sophos.com/nsg/sophos-firewall/18.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNRemoteAccessSSLVPNSophosConnectClient/index…
  • Sophos FW Remote access VPN

    Hi, I configured the SSL VPN Remote Access when inside Fire network i can Sophoss connect is working but when outside its not. what have o missed or i have done wrong. If i use a phone hotspot to connect to SSL VPN will i be able to connect?
  • Sophos Connec Client: Provisioning File only adds SSL VPN Profile, not IPsec Profile!

    Scenario is as follows: Sophos Firewall Version: 19.5.2, XGS 6500 Sophos Connect Client Version: 2.2.90.1104, Windows 10 22H2 Sophos Firewall is configured for SSL VPN and IPsec VPN. User adds .pro file in Sophos Connect. User is prompted…