Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • SSL VPN

    Hi !! im having a problem whit my SSL VPN´S, i have my SSL VPN whit the "USE as Default gateway option on" In my NAT rules i Have my SSL VPN doing MASQ to original, and in firewall rules i have permitid the SSL VPN to access my LAN´S and the WAN on…
  • SSL VPN from both WAN Sophos XG

    Hi, first of all is it possible to use the internet on both wan ports? Like combine? Secound, would it possible to combine both wan ports for ssl vpn? We have two providers which give use each 50mbit/s uploud, and sometimes we need more for remote…
  • SSL vpn connection reset by gatway

    I am facing problem to conect ssl vpn through windows 10 only two system when i was connection network connected successfully but when i try to surfing internet then....give me error "your conmection reset by "ip address" default gateway i will also scan…
  • SSL VPN with and without radius/mfa

    hello, we need to use both ssl authentication with radius/mfa for admins and no mfa for normal users. ssl authentication servers are radius and AD. when i (admin user) connect to openvpn, i need to use mfa but if i wait without validating mfa, i…
  • Apply policy for VPN Users

    Hello I have sophos xg 210 version 19.5 and i want to block social media for users how use ssl remote access sincerly
  • SSL VPN SOPHOS XG 19.5 Build 197

    Hey Guys, I have followed the guides for creating an SSL-VPN that authenticates through Active Directory. When I have my laptop internal to the network and initiate a VPN connect it works fine. Connection is established. The logs show this. However…
  • Assigning static ip to SSL VPN users results in Authentication failed when switching networks

    Just upgraded from 19.5.0 GA-Build197 to 19.5.1 MR-1-Build278 in hopes that this would be resolved. The issue is mobile phones are unable to reconnect the SSL VPN when they roam between different networks, eg from a local wifi to mobile isp and vice…
  • Client VPN SSL and Static Route

    Good morning, on an XG router I have created VPN-SLL users, everything is ok, the VPNSSL users access the client LAN, but I can't reach a static route defined on the XG router, I checked the FW rules, the accessible networks in the VPN Policy, etc.…
  • Sophos Firewall: When will SSL VPN users need to re-download the configuration

    Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview Pre-requisites Editing SSL…
  • DNS issue after a short period - SSL VPN

    Hi, I have a user using SSL VPN (Remote Access) to connect to the office. This worked good over the last months, but we're now having strange issues: After a short ( but undefined) period of time, he's unable to access any internal web resources…
  • Installing Tunnelblick on mac to connect to XGS126 SLL VPN

    I am trying to help a mac user to connect to our SSL VPN. Using the Sophos client connect app. It is not supported on mac according to sophos support. Sophos support sent me instructions on setting up Tunnelblick however as is often the case, the instruction…
  • Sending Remote access traffic through Site-to-site VPN, with 1:n nat translation on XGS

    Hello Sophos community, I am trying to set up a szenario where I have to send IPsec Remote access traffic through a Site-to-Site IPsec VPN with 1:n NAT translation on a XGS Firewall. It seems to work on UTM: Sending Remote access traffic through…
  • SSL VPN to Sophos Connect Migration Anomalies; Some Resources Now Unavailable

    Hi Sophos Community, We've switched from using the SSL VPN client to Sophos Connect. All configurations used for SSL VPN via the old client are now used with Sophos Connect. For the most part everything has gone smoothly, only now some actions…
  • SSL VPN GLobal Settings dosen't save

    Hello, I have a Problem with Global Settig update , save. See my attachment. What IP-Address is it ??
  • SSL VPN used in a VPN gateway, trouble accessing remote network from other networks going through the gateway. Any remedy?

    A remote vendor used his SSL VPN connection (login and OVPN file) in a VPN gateway. His goal is for various machines on multiple networks on his end to access my network through this VPN gateway. The vendor is able to reach my network from the gateway…
  • Configuring dual WAN IP with an SSL VPN client

    we have to Dual WAN with static IP- refer to below screenshot 118.189.XXX.XX is the primary WAN IP address. 165.21.XX.XX is the secondary WAN IP address. The problem is that SSL VPN is configured with the IP address 118.189.XXX.XX (Primary WAN)…
  • Create SSLVPN user certificates without user portal

    Hi, is there any way to generate the "per user certificates" used for SSLVPN without logging in to the userportal as an admin? Users are AD users. We have a big SSLVPN rollout and this would help us to do this much faster. Regards, Sebastia…
  • Firewall single Official IP with NAT causes SSLVPN not to work

    Hi everybody, I have done an Update from SFOS 18 to SFOS 19 and since the Update I am not able to connecto to SSLVPN any more. In CLI I can see that all incomming Packets are dropped for SSLVPN when running ( drop-packet-capture "port 1194"). But…
  • When will SSL VPN Users need to re-download configs?

    Hello, we are currently testing 2FA with our XG v 19.0.1 and also some VPN changes. Now every user has to download his personal config file from the user portal so he can connect. Is there a KB or something else where it is written WHICH option(s…
  • Use Remote Access SSL VPN to reach 4 different internal networks

    Hello, We convert the configuration from UTM 135 to XGS 136 and we have one Problem with Remote Access SSL VPN and sNAT. With the UTM we have a C2S SSL VPN for Homeoffice users to the main office (1). The main office has 3 additional S2S connections…
  • SSL VPN Routing Questions

    So I have SSL VPN setup and working. I need to know if there is a way to create specific routes for VPN traffic. We have an internal application that resolves to a Public Range, but our internal router has a route statement to send that instead to an…
  • Sophos XGS SSL-VPN .ovpn files wrong output

    Dear all, We are struggling with the generated .opvn Connection files users can download from the user portal on the WAN ports for VPN we do not know and cannot find it in the online help, how they are created. our setting: XGS 3100 Firewall, Firmware…
  • Access application on local subnet without login through SSL VPN connection

    Did set up a SSL VPN connection (Clients are in the 10.81.0.0/16 range.. Using an iOS device as client and could connect to my network in the 192.168.1.x range. Due to the fact that I'm not on the same subnet the application requires me to login again…
  • BUG? cant change vpn settings

    Hello. Ive got SSL-VPN on SophosXR Home. I wanted to make some changes and i just cant. its showing an error which is weird - false positive? Red arrows are fields that i wanted to change ERROR
  • Map with Public SSL Certificate with Sophos Firewall Public IP

    Please guide me on how to map SOPHOS Firewall Public IP with Public SSL Certificate. Also, how to access Firewall with a Hostname instead of an IP Address