Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall: SSL VPN File Special Characters Gets Replaced By Encoded Values Resulting To An Error When Uploading to OpenVPN on Android

Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment.

______________________________________________________________________________________________________________________________________

Table of Contents

Overview:

This Recommended Read would provide a walkthrough regarding the workaround for SSL VPN (OpenVPN on Android) when a username has a special character and is then replaced by an encoded value on SFOS v20. The team is now aware of the issue, and this is being internally tracked under NC-130692.

Scenario:

A user has a username containing a special character @ ( e.g.  - rap@ on the example below)

Then download the OVPN file on and Android Device via VPN Portal 

 

Notice the file name changed the @ to %40 

Then, when you try to upload the file to the OpenVPN App on Android, you’ll face an error.

Workaround:

We edit the file name to the equivalent of the encoded value to special character, in this case we change the %40 to @ sign 

Testing:

Upload the edited file again to the OpenVPN app on Android and then the Profile should be uploaded correctly without error

On Android OpenVPN App (Successfully Connected)

On Sophos Firewall: 

Additional Information:

- The issue is being internally tracked under NC-130692

- ETA for the fix should be on v20.0MR1 and v21.0

- For more information on how to use OpenVPN on Android you may refer to this KBA: https://support.sophos.com/support/s/article/KB-000038870?language=en_US

______________________________________________________________________________________________________________________________________



Edited format and title
[edited by: Raphael Alganes at 5:11 AM (GMT -8) on 15 Feb 2024]