Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • SSL Client - No download logs user out (V20)

    Hi all, Upgraded to the new v20 firmware and i'm unable to download the latest SSL VPN client, when clicking download it logs the user back out to the login page. Is the client available for download a different way? Thanks!
  • Unable to Connect VPN due to SSL CA Certificate Expired

    Hello. We have a client using Sophos Firewall installed in a VM. ( Firmware 17.5.12) They are have expired SSL CA Certificate and when they applied new SSL CA Certificate, it shows error and VPN users unable to connect. So, now they are using expired…
  • Latest iOS OpenVPN update breaks SSL VPN

    Hi, after updating to the latest OpenVPN app (v3.4.0) on iOS/iPadOS, you are unable to establish an SSL VPN connection to Sophos XG. An error is shown about an unsupported option in the config file. Our vendor found out that removing the 'route-delay…
  • cannot connect via ssl vpn

    Hi Since the upgrade to ver SFOS 19.5.3 MR-3-Build652, all the users cannot connect via vpn. 3 customers with Sophos FW XGS 3300 cluster Sophos FW XGS 2100cluster Sophos FW XGS 116 The error is: ssl vpn error:0x20000000 scgui.log 2023-10-04 12:39:56PM…
  • Not able to connect SSL VPN

    Hello, I would be needing help with SSL VPN. I have configured the SSL VPN on our XG Firewall and I downloaded the client and when I am trying to connect to the VPN, I am getting an error in the event " Received connection reset from Gateway: IP Port…
  • DNS not resolving through SSL VPN for iOS on XG SFOS 19.5.2 MR-2-Build624

    Windows clients work fine and can resolve domain.server.local names just fine over vpn. ios clients on local wifi resolve fine. ios clients on vpn (openvpn) cannot find domain.server.local domain is set in vpn settings, dns server ip is set in vpn…
  • Sophos connect ssl vpn seems blocked in Egypt

    Hi everyone , So we've got some users located in egypt , and we are trying to allow them remote access to our network through sophos ssl vpn using sophos connect client , whatever we tried it's not working , this is what we've tried so far : -connect…
  • Windows OpenVPN SSL Remote Access VPN Slow But MacOS Speed Is Fine

    Hi, XGS2300 (SFOS 19.5.2 MR-2-Build624) We have a bunch of Macs and a couple Windows 10 PCs. The Remote Access SSL VPN Works great on Mac. With a 500/500 connection at the office I get 300-350 from my home on MacOS in speed tests to a server in the…
  • Does Sophos MFA Expire

    Please does Sophos MFA expire? I configured MFA on SSL VPN about 3 months ago and I had issues connecting sometime last week. I had to delete my MFA account, rescan the QR Code on the user portal before I could access the SSL VPN again. Now two users…
  • SLL VPN outside country

    Hello All i have setup my new XG and everything work Fine.. then i configure my SSL VPN and tested in my home different location in same country and all work perfect once i try to login from different country, i can't login at all i have change…
  • Remote SSL VPN. Modify downlodable .OVPN adding custom command.

    Good morning everyone, on sophos XGS I configured the client-site SSL VPN, everything works except the resolution of internal names, probably because our internal windows domain has the same name as a public domain that is not ours (I know it's a bad…
  • Remote Access VPN SSL and IPsec x DNS local and external

    Hello! I have a need for configuration that has never been necessary before. I have remote users using SSL VPN. In my global SSL VPN settings I give my two internal DNS servers and also the company domain so that name resolution for internal services…
  • Remote Access SSL VPN Default Gateway

    Problem: I need to route all traffic from Android devices through the SSL VPN (using openvpn client currently). What's configured: I have basic SSL VPN settings configured. I have a firewall rule allowing anything going to the WAN and there is a default…
  • Assign a specific ip to ssl vpn user in v19.5.1 MR-1-Build278

    How do I assign a specific ip to remote ssl vpn user in v19.5.1 MR-1-Build278?
  • AD password change in XG VPN client

    Hi We are getting lots of negative feedback after deploying Sophos XG firewalls in place of Cisco ASAs as the VPN client doesnt seem to support AD password change prompts when using RADIUS backend for auth. Is there any way in which AD password expiries…
  • Upgrade from v17.5.12 to v18 MR-3 and SSL VPN clients

    Do we have to re-install SSL VPN clients after upgrade to v18 MR-3 from v17.5.12 ?
  • How can i set the max login fails for the vpn Client?

    How can i set the max login fails for the vpn Client? Iam using Firewall XG and SSL-VPN (RemoteLogin/ Fernzugriff)
  • Uninstall Sophos VPN CLient Silent

    Hi Team, I tried to uninstall Sophos SSL VPN client 2.1 for being able to install the latest version of your VPN, Sophos Connect. What's the best way to do it silent, I used PDQ deploy for my deployment. can I get some help from someone on the Sophos…
  • Sophos Xg SSL VPN clients got disconnected. VPN Client logs are given below -

    Thu Nov 25 19:15:15 2021 MANAGEMENT: >STATE:1637847915,CONNECTED,SUCCESS,10.10.10.2,180.151.22.206,8443,192.168.1.27,23766 Thu Nov 25 19:15:56 2021 write TCP_CLIENT: Unknown error (code=10054) Thu Nov 25 19:15:56 2021 write TCP_CLIENT: Unknown error …
  • CVE-2020-15078 - Sophos SSL VPN Client / OpenVPN

    Good Day everyone! May I ask a question about the Sophos SSL VPN Client. One of our customer is using a vulnerability scan tool (Qualys) and reporting is showing me entries from clients with installed Sophos SSL VPN Client. Firewall Version is SFOS…
  • Sophos Connect loses connection

    I have a network with ~150 connections and with client-to-site vpn every new connection requires the import to be reconnected after our new associates leave our main campus. I just took over this network about 4 months ago and am still learning about…
  • Multiple SSL VPN on same AD

    Hello, We are based on two sites, each site has an XG firewall, is it possible to present a user, two SSL VPN configuration for each site, and choose between them in case a site is down ? for information all users are under the same tree. I have…
  • Sophos XG210 to XG125 RED TUNNEL - SSL VPN from one XG could not access the other XG's network.

    Hello, I have succesfully connected a XG210 and a XG125 with RED site-to-site tunnel. From the network of the XG210 (10.69.95.0) i can ping the network of the XG125 (10.69.94.0). But when a client connects via SSL VPN on the XG210 he could not ping…
  • Is it possible to adjust the SSL VPN configuration within the Sophos XG Firewall?

    Dear All, I am looking for the possibility to adjust the SSL VPN configuration on the Sophos XG Firewall. I do know it is possible to adjust it on the local machine (for instance Windows). It this something already in-place or is this something…
  • SSL VPN Client dont connect with AD users

    Hello All I have configured SSL VPN remote access, i can remotely donwnload and install client with user configuration But it is impossible for users added from AD to connect to the VPN. I tried with a user created locally on firewall, it connects…