After updating to the version SFOS 19.5.3.652, users could not login to the VPN. Authorization is done on ESET's RADIUS server with OTP. The RADIUS server test will run correctly. There is an error in the log - failed to login to SSLVPN through RADIUS…

Hi, is it possible to configure a client having Intercept X installed to allow connecting to the sophos gateway via VPN only when Intercept X is running on that client? Can this be configured somewhere? This is a form of NAC (Network Access Control…

Hi, I have L2TP over IPsec VPN setup on our SG125W firewall and it's not the best as it adds a lot of overhead to the user's connection experience. So searched around on the internet and found this article for setting up SSL VPN using a RAIDUS server;…

Hallo zusammen, Folgendes Problem: Der Tunnelaufbau funktioniert, Zugriff zu Internen Ressourcen funktionieren ebenfalls wie gewollt. Jedoch können die Clients nicht Surfen. Use as default Gateway muss aufgrund von Sicherheitsvorgaben hinterlegt bleiben…

Good day Members, I trust you are well. We are trying to setup MFA for users to use with the VPN. We have Eset Secure authentication and would like to continue to use it as the MFA application. We currently have a Sophos xgs and are using the remote access…

Hi all, we would like to monitor the currently connected number of ssl vpn users with PRTG. Unfortunately there seems to be no snmp oid for this - see SNMP - Number of VPN Users? Any other ways to access this value? Sophos API, SSH? Any plans to create…

Operating System Version. Mackintosh – Ventura 13.4

Good Day, I am trying to download our Self-Signed Certificate from the Firewall to deploy to all users to prevent users from seeing a certificate error when signing on to the Sophos Connect SSL VPN. There is no download button on the firewall what…

Hi All, Thanks in advance. I tried the other solutions in the previous posts but none seemed to have worked. I tried to stop/start these services: OpenVPN Sophos connect. Strong Swan IPsec service. Also, reinstalled the client from the user…

Hallo zusammen, ich habe ein Problem und stehe gerade irgendwie auf dem Schlauch. Und zwar habe ich bei einem Kunden eine Sophos XG136 im Einsatz. Hier ist eine Außenstelle über eine SD-RED 20 angebunden. Die Anbindung funktioniert auch, man kommt von…

Hello everyone, I have XG2300 SFOS 19.5.2 MR-2-Build624 and I have an issue with the Remote access SSL VPN connection. The issue is that a user connected via Remote SSL VPN receives a reset connection from server at random. I have tried to resolve…

Hi All, I have Sophos XG box and I am interested in utilizing the remote access VPN functionality within a Linux environment. Could you kindly inform me if the Sophos XG Box supports remote access VPN for Linux? Moreover, if you have any resources…

Hi, I am connected with SSL VPN, everything is accessible. The HP ILO is unfortunately only accessible from the lan, but I would like to access it via SSL VPN. What is the best way to do this? Regards Markus

We are currently facing an issue with our Sophos XG230 Firewall configuration related to LDAP user authentication and group assignment for SSL VPN profiles. Current Configuration: Firewall Model: XG230 Firmware: XG230 (SFOS 19.5.2 MR-2-Build624…

Dear SupportTeam, I am trying to allow UTM9 ssl vpn user to get access to the XGS Firewall through the existing IPsec tunnel, Can someone help me with how I Can do that Best Regards Nazir Heravi

Hello, I made a remote ssl vpn connection with the client , I used this link to make it https://doc.sophos.com/nsg/sophos-firewall/18.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNRemoteAccessSSLVPNSophosConnectClient/index…

Hi, I configured the SSL VPN Remote Access when inside Fire network i can Sophoss connect is working but when outside its not. what have o missed or i have done wrong. If i use a phone hotspot to connect to SSL VPN will i be able to connect?

I have some remote laptops connected by SSL VPN. They can access the network with issue. From the LAN I cannot ping them or access anything else like RDP etc. I have this rule which I thought would mean I could. How can I troubleshoot please?

Hello all, We have some external contractors that require access to our Azure network instance, and instead of whitelisting their own public IPs, we want them to come through our firewall (XGS 136, latest SFOS, SSL VPN set to act as gateway mode), so…

In the downloaded SSL VPN client configuration file the SSL VPN CA is attached in the beginning of the file. In my world is should be the CA which has signed the SSL VPN server cert configured in the UTM. But is not! I have two UTM:s, one the first, the…

Hi Community, i'm facing a strange problem in a sophos from one of our customers. The SSL VPN Has beenstruggeling with long first loading times in the browser, for example we go to google.com, takes about 40 seconds to load, so i thougth it was a…

Hallo, ich hätte ein paar Fragen bezüglich der Möglichkeit der Port Weiterleitung der SSL-VPN-Verbindung von einer Sophos SG125 ( 9.716-2 ). Aufbau der VPN-Verbindung: Hintergrund: Die Sophos soll den VPN-Traffic handhaben und es soll eine…

Hello everyone, I'm reaching out on behalf of a customer who is encountering an issue with their XG230, which seems to be creating two 'phantom routes' as part of the SSL VPN configuration profile. We've noticed that due to these phantom routes, the…

I have a new install of v19.5 on my own hardware (protectli vault), switched from pfsense this week. The firewall is performing very well with one exception. I configured a "country block" rule and blackhole NAT at the top of the rules. But once I do…

Hi All, I was wondering is there a way to have 1 Domain used for SSL VPN connection . So to explain better. You can have 1 Domain that gets resolved to the external IP interface of the device. But lets say we have 2 external IPs, Is there a…