VPN connection for outsiders
I am trying to get users connected to my vpn, I have follow the ssl vpn setup guide however they are still unable to connect to my address which i had setup the ddns.What else is required to complete the setup, what am i missing? only time i am able to…
VPN Menu Missing from User Portal
Hi there, I am using a Sophos XG 115 firewall. Yesterday the VPN stopped functioning after I installed the most recent firmware version MR-2-Build378 (20.0.2), and the VPN menu vanished from the user interface. I am able to download the Sophos Connect…
VPN global setting not applying changes
Hi, i recently just updated the frimware to the latest 20.0 ver. Problem now i cant save the new ip range in the vpn global setting. As theres and know issue of the range thats need to correct from .5 to .0 after update. Only 2 firewalls seem to be having…
SOLVED: Sophos Connect broken after Windows Update 2024-08 - Service not available
Hello community,
since installation of Windows Updates
- "KB5041580" ( https://support.microsoft.com/en-us/topic/august-13-2024-kb5041580-os-builds-19044-4780-and-19045-4780-2ef55b0d-bb01-41c8-8629-4146929792ad ) on Windows 10 22H2 and
- "KB5041585…
VPN config broken, no server_dn is NULL in SQL after restore
I had to restore my firewall from a backup, and now I can't download SSL VPN config from the portal anymore.
Checking the log I get the following error:
/home/jenkins/root/workspace/OmC/CI_64/build_dir/target-x86_64_glibc/vpnportal-1/internal/vpndownload…
Policy Mis-Match Error on Sophos VPN Client.
Hello, we are using Sohpos XG virtual firewall to connect VPN, it was working fine till few days before. Now on connecting we are observing error which states that "Policy mismatch error. Import a new policy for this connection." Please note that applied…
XGS3300 MFA for SSL VPN
Hey,
is there a possibility to set up MFA for SSL VPN on the XGS 3300?
Maybe even a SAML authentication with the MS authenticator?
Can't find any infos on that in the documentation, neither can i find an optiuon the the admin panel.
Can anyone…
SFOS 20.0.2 SSL VPN connection problem only on work laptop
Hey everyone,
I was recently given a SG115 firewall to mess around with and installed SFOS on it. While learning how to use it I've setup an SSL VPN connection that works on every computer except for my work laptop, which oddly enough is able to connect…
Route aus VPN wieder zurück auf das LAN ändern
Hallo,
ich hatte den Datenverkehr zum Sophos-Support (eu2.apu.sophos.com) durch einen Site-to-Site SSL VPN Tunnel zu einer anderen Sophos geschickt, da der Zugang dierekt über WAN gesperrt war. Nun sollte dieser Zugang über WAN freigeschaltet sein.…
Sophos Connect options (Provisionig file)
Hi team,
is it possible with Sophos Openconnect to only execute the Logon Script after successful vpn connection (using the .pro file)? Or is it also possible to run any custom script or command?
I read the articles and if I did understand correct…
Sophos Connect Provisioning File Userauthentification error
Hello,
we build a Sophos Connect Provisioning File for our XGS 3300 on FW 20MR1. We have the following Problem. If the Users "starts" the provisioning File and Enter his Credentials for log in, he gets an UserAuthentification error - with the Correct…
Implementation of provisioning + OTP in Sophos Connect client
Hi there,
I´m refering to this thread:
Unsatisfactory implementation of provisioning + OTP in Sophos Connect client
Is it still not possible to SETUP OTP during first Sophos Connect Login? Is it still necessary to have all users connecting to…
Sophos Connect 8 hour disconnect
We have a XGS210 using Sophos Connect and SSL VPN. After 8 hours users are getting disconnected. There has to be an authentication time out that is set for 28,800 seconds but I can't find it. Can someone point me in the right direction? I'd like to increase…
Sophos Connect Windows on ARM CPU support
Testing Microsoft Copilot+ Windows 11 laptops based on Qualcomm Snapdragon ARM CPU - Lenovo ThinkPad T14s G6 snapdragon in my case. I have seen old forums mention that ARM support was in the backlog for Sophos Connect. I suspect this question will come…
.ovpn Pfadangaben unter Windows
Hi Leute, ich habe ein kleines Problem bei der Einrichtung einer VPN Verbindung. Ich habe vom VPN Anbieter eine .ovpn Datei sowie ein Zertifikat im .p12 Format und eine .key Datei erhalten. Alles drei residiert im Dokumentenverzeichnis in einem Unterverzeichnis…
Unable to Reach RED hosts from Remote SSLVPN - Urgent help needed
HI - Time sensitive here, back against the wall (will pay outside consultant if needed). Sophos Partner, long out of the loop. I have (2) REDS. Both are reachable from main XG network. I am unable to reach the RED hosts from the SSL VPN.
REDS are in…
SSL VPN: Profile Disappears When Switching User Session
Table Of Contents:
- Overview
- Steps to Reproduce
- Workaround
When users switch sessions on the same computer, the imported configuration profile disappears (NCL-1621). This is currently observed under Windows 10/11 OS using Local or AD account…
CVE-2020-20813
Hello, I verified that my Sophos XGS SFOS 20.0.0 GA-Build222 has OpenVPN 2.4.7 which is vulnerable to CVE-2020-20813 which according to NIST has a high level. As I use SSL VPN for remote access, I need to know if my firewall is vulnerable.
Best Regards…
SSL VPN Pattern upgrade to 17.5.15
Dear Support,
If having XG210 ( SFOS 17.5.15 MR-15 ) with SSL VPN pattern current version ( 1.0.008 - 05:32:30, Sep 11 2020)
Using the web interface, can a manual pattern upgrade to the version ( sslvpn_1.02_1.0.009.tar.gz.sig ) occurs without any…
SSL VPN: Remote Access Static IP with UDP Second Attempt Of Tunnel Fails
Table of Contents:
- Overview
- Configuration on Sophos Firewall
- Workaround
- Testing
- Related Information
Overview:
SSLVPN Remote Access Static IP with UDP, 2nd attempt of tunnel establishment auth_fails as ip address is not released when previous tunnel…
Sophos XG : NET::ERR_CERT_COMMON_NAME_INVALID
HI all,
Hoping you can help.
Recently an external website we access has been updated and hosted elsewhere. Following the move we now get the following error but only when connecting via the VPN (Remote access). We can browse to the site without issue…
XGS - SSL VPN not working from neighbouring WAN IP (hosted offices)
Hi I have customer with SSL VPN working fine 99% of the time.
However users cannot connect from the same WAN subnet.
Ie say the WAN IP of the XG is 85.85.12.5/27
If a user tried to VPN from anoter network which is on the same ISP (ie 85.85.12…
What's the impact of DNS settings in General SSL VPN settings
Hi,
I've deployed doznes of SSL VPN clients, having DNS set to on-premises AD LAN DNS server 10.1.1.10 in General SSL VPN settings for all clients. Now when client with laptop connects to SSL VPN, I can see his/her default DNS resolving goes through…
SSL VPN: Auto Connect clients on Start-Up using Provisioning File
Table of Contents:
- Overview
- Configuration
- Related Information
This guide will show how to auto-connect a Windows device on start-up to Sophos Firewall SSL VPN Remote access.
The Sophos Connect provisioning file allows you to provision remote…
No option for downloading SSL VPN configuration on Sophos XGS2300 user portal
Hi. I just recently changed my SSL User account on Sophos, and after that, I can not access Sophos through SSL VPN and receive "received connection reset from gateway" on the Sophos connect client. When I log in to the user portal to download the new…