Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Unable to reach SSL vpn client PCs from LAN

    I have some remote laptops connected by SSL VPN. They can access the network with issue. From the LAN I cannot ping them or access anything else like RDP etc. I have this rule which I thought would mean I could. How can I troubleshoot please?
  • External Contractor access to Azure via our SSL VPN, with Mac OS tossed in...

    Hello all, We have some external contractors that require access to our Azure network instance, and instead of whitelisting their own public IPs, we want them to come through our firewall (XGS 136, latest SFOS, SSL VPN set to act as gateway mode), so…
  • CAA on Apple Mac over SSL VPN Timeout - need debug tips

    Today a Mac User had a SSL VPN connection and was authenticated with CAA client authentication agent against XG firewall 19.5.2. During work, the user authentication dropped - due to timeout, according to access_server logfile. The SSL VPN connection…
  • After we upgrade the firewall to 19.5.2, Vodafone net package confuses VPN service users from WE package.

    We download the new Sophos connect client from user portal. And uninstall old client and install the new one. Plus I contacted both ISP and they conf irmed no ports are blocked!?
  • SSL VPN Connect Client 2.2.90, internal DNS name resolution broken, need to reinstall client

    Hi, our Windows 10 users use Connect Client 2.2.90 with the infamous .pro file to tonnect to XG 19.5.2 Firewall with SSL VPN TCP and access internal resources. The SSL VPN clients use the XG firewall as DNS resolver. The XG uses DNS forward rule for…
  • Sophos XG SSL VPN Stopped

    Hello, I suddenly facing a problem of connecting with SSL VPN. Can you please help? Below is the log from Sophos Connect Client 2023-08-03 20:39:34 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption…
  • Sophos connect ssl vpn seems blocked in Egypt

    Hi everyone , So we've got some users located in egypt , and we are trying to allow them remote access to our network through sophos ssl vpn using sophos connect client , whatever we tried it's not working , this is what we've tried so far : -connect…
  • SSL VPN - Routes without IP address

    Hello everyone, I'm reaching out on behalf of a customer who is encountering an issue with their XG230, which seems to be creating two 'phantom routes' as part of the SSL VPN configuration profile. We've noticed that due to these phantom routes, the…
  • XG v19.5 SSLVPN and Country Blocking

    I have a new install of v19.5 on my own hardware (protectli vault), switched from pfsense this week. The firewall is performing very well with one exception. I configured a "country block" rule and blackhole NAT at the top of the rules. But once I do…
  • Sophos Connect with multiple SSL VPN connections simultaneously

    Sophos does not provide instructions on how to enable multiple SSL VPN connections simultaneously for Sophos Connect in Windows. However, I think I would need multiple TAP adapters for this as described here: Sophos UTM: Make simultaneous SSL VPN connections…
  • OpenVPN SSL VPN Configuration gives error: Unsported Options "route delay 4"

    Since Sophos XG is depended on OpenVPN for many clients, we only use it for all: https://doc.sophos.com/nsg/sophos-firewall/18.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNSophosConnectClient/index.html#import-configuration…
  • SSL VPN with IPv4 but message TCPv6_SERVER: Connection timed out (code=110) and Broken pipe (code=32)

    We have a user that is complaining repeatedly about disconnecting SSL VPN (TCP) with Connect Client 2.2.90 SFOS is 19.5.2 I assume his ISP uses IPv4 sharing / DS-Lite. Nevertheless, when he connects, he is connecting with an IPv4 address and that…
  • Changing Sophos VPN Client / Sophos Connect after subnet modification

    Hello Experts, I would need to change the subnet that is used for remote SSL and wondering what would be the best approach... Trying to find out whether: is it required to reinstall Sophos VPN client/ Sophos connect after this change? if so…
  • SSL VPN DNS RESOLUTION FAILED FOR GATEWAY

    Good day When trying to connect SOPHOS connect , shows error message , DNS resolution for gateway
  • Sophos Connect by MAC and Parallels in Windows Domain

    Hello Sophos users, we can´t install Sophos Connect Version 2.2.90 on a system with Mac (M2 Chips) using Parallels as virtuell windows system. System type: 64-bit operating system, ARM-based processor However, an error message (installation failed…
  • Smartcard Authentication with Sophos Connect

    Hello all. Our company is considering moving to smartcard authentication to converge three different badges we carry for identification. We have a small contingent of workers who currently VPN in using SSL VPN. I have been trying to find any documentation…
  • Windows OpenVPN SSL Remote Access VPN Slow But MacOS Speed Is Fine

    Hi, XGS2300 (SFOS 19.5.2 MR-2-Build624) We have a bunch of Macs and a couple Windows 10 PCs. The Remote Access SSL VPN Works great on Mac. With a 500/500 connection at the office I get 300-350 from my home on MacOS in speed tests to a server in the…
  • Error install SophosConnect_2.2.90_IPsec_and_SSLVPN Internet explorer 11

    My internet explorer 11 is in version LOG: MSI (c) (58:14) [02:24:17:400]: PROPERTY CHANGE: Adding IEVERSION property. Its value is '11.789.19041.0'.
  • Sophos Connect Import Failed

    Hello, One of my staff working in my company, using a MAC computer, gets the "File Import Error" error when connecting to VPN, the same config file is processed on the device with the windows operating system and it works smoothly, I expect your support…
  • SSL VPN ping devices with no gateway?

    Hi, while connecting remotly throught a VPN SSL and reaching LAN, I can only ping and reach devices with default gateway configured. (no DHCP running, only static addresses) There's a way to solve this without configuring gateway or placing a router…
  • SSL-VPN

    Hi I have a sophos fw xg2100 with two wan links and set up a new ssl-vpn connection, the problem is that the automatic .ovpn file generated by sophos has the remote gateway order wrong! Well if I manually edit the file on notepad, everything works…
  • Sophos XG SSL VPN Group IP white list

    Is there a method to white list IPs per SSL VPN group, to only allow those users to be able to VPN in if they are coming from the list static IPs?
  • SSL VPN Access to internal not woking

    SSL VPN Network: 192.168.99.0 /24 Local Network: 172.20.10.0 /24 - (Multiple) Firewall-Rules from VPN to internal resources - added all networks under Permitted network resources (IPv4) - testet with/without "Use as default gateway" in VPN conf In…
  • Sophos Xg Home SSL-VPn & accessing Multiple Networks

    Been a long time lurker, but never really needed any help until now. I followed this awesome video, have the vpn up and running.. I can access the default main network but none of the other networks on different vlans. https://www.youtube.com/watch…
  • Sophos 365 issue

    Hi Team, When a user try to connect the Sophos Connect it is prompting for a 365 password reset , Does any one knows why does it pop up We have sync thing between Sophos XG and 365 , The sync was done few months back and this promt started yesterday…