Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • VLAN in a IPsec Tunnel randomly stop communicating.

    Hello I recently upgraded my Sophos XG 2300 to SFOS v20 which is in Head Office, where I am running site to site vpn: IPsec tunnels to 6 branch offices and IPsec Profile is set to Head Office, policy based for all IPsec Tunnels on Head Office firewall…
  • Site-to-Site VPN

    Hi, I have a constellation with a site-to-site VPN between a Sophos XGS116 and a Sonicwall TZ400 at a customer's. The connection between the two devices keeps breaking down. On the Sonicwall you can also see that the VPN tunnel has been disconnected,…
  • No SSL S2S Tunnel after SSD Upgrade

    Hello Folks, a customer installed the ssd upgrade and after the reboot all ssl site-2-site tunnels don't work. ssl remote access works, ipsec tunnels are working. here are some lines from the sslvpn.log: we created a new connection, same issue…
  • SSL VPN : MAC Address and User Active Duration

    Hi, Currently we are using Firewall XG310 and SFOS v20 . My question is : 1. How to bind vpn user mac-address without asking their mac-address manually? Could sophos FW detect it automatically ? 2. Could we set vpn user state duration ? Example…
  • OpenVPN Android can not read data / import file profile

    Hello same issue SSL VPN config file naming We got this since the firmware upgrade to XGS2100 (SFOS 20.0.0 GA-Build222), from SFOS 19.5.3 MR-3-Build652 The file has some other problems too, it now adds the CA two times, and at the beginning…
  • POLICY BASED IPSEC VPN with Source NAT (MASQ)

    I'm migrating from a UTM to an XG so i'm trying to replicate a config that already existed. I have the IPSEC VPN setup and the tunnel comes up. The VPN selector on my side only has a /30 I need to have the rest of the organisation talk through this VPN…
  • IPsec client disconnection problem , at 60'minutes firewall XGS116 (SFOS 20.0.0 GA-Build222)

    Hello , on upgraded system SFOS 20.0.0 GA-Build222), we encounter problems with VPN Client IPsec disconnection after 60 minutes, the system does not take into account the Dislabe Disconnect when tunnel is idle. can you help me solve problem , i have…
  • openVPN 3.4.0 problem

    Hello Dears, I'm facing a problem with openvpn 3.4.0 (9755) on Android after the update, My UCM is XGS2100 (SFOS 20.0.0 GA-Build222) any help, please ?? Thank you.
  • Sophos XGS 136W - Super Slow VPN Performance 1/10th to 1/50th Actual Speed.

    Hi Sophos Community Team, I Have Sophos XGS 136W Latest OS + Fixes including SSD Fix (that wasn't a fun update FYI). I currently am experiencing very slow VPN performance - like bare iperf speed is 500-900 Mbps and sophos VPN speeds between…
  • SSL VPN Full Tunnel not routing IPv4 traffic

    I have an SSL VPN setup with Full Tunnel. It works fine if I connect from places with IPv4 only. However, when I connect from a mobile phone with IPv6, I can't route anything that is IPv4. The VPN global setting is set to IPv4 only. Please help. …
  • Sophos XGS: random disconnects for SSL VPN clients

    Hi, for some reason every SSL VPN client is quite randomly disconnected from the SSL VPN server (Sophos XGS87w): sometimes after only a few minutes, mostly between 15 and 20 minutes. Running a ping from the client side to a machine in the server network…
  • IKEv2

    When will IKEv2 for Remote Access VPN be available?
  • Sophos FW Unable to download ssl vpn configuration after v20 update

    Hello, i have 2 xgs 116 fw. After updating v. 20 i can't donwload vpn configurations from vpn portal. Error " Failed to download the file. If the problem persists, check with IT. " Under Pattern updates page there is no version shows at SSLVPN Clients…
  • SSL VPN Client can connect but no traffic is generated to VPN zone

    Hi all, I was able to use SSL VPN properly with Sophos XG v19. Now I've upgraded to v20 and I'm experiencing issue with SSL VPN. To setup the SSL VPN I followed this guide: https://techvids.sophos.com/watch/wtqMJE1La6TkFjAiaT2d3H I draw a network…
  • Sophos Connect ipsec VPN Geo restriction

    In SFOS 19.x or 20.x is it possible to restrict Sophos Connect (remote access) ipsec VPN clients by country without putting a 2nd XG firewall in front of the XG serving the VPN? Example: permit client vpn connections only from Canada.
  • SSL Client - No download logs user out (V20)

    Hi all, Upgraded to the new v20 firmware and i'm unable to download the latest SSL VPN client, when clicking download it logs the user back out to the login page. Is the client available for download a different way? Thanks!
  • IPsec Remote Access VPN - Change Client information name (field greyed out)

    Hello Sophos Community, I'm rolling out Sophos Connect Client and IPsec provisioning file via group policies for a customer right now, everythings working fine except for one thing. When the vpn provisioning file is imported to sophos connect client…