I’m documenting my numerous issues with SOPHOS Firewalls so that others can be aware of what they are getting themselves into.
Episode 1
community.sophos.com/.../sophos-purposefully-designs-bugs-into-their-firewalls-episode-1---vpn-failover-and…
Hi, I have a new project for the implementation of security infrastructure in organization and I want to set up all thin clients when they start up windows, Sophos VPN clients connect automatically. Any help? Regards.
So this is basic I'm setting up a firewall rule to allow specific VPN traffic
Here's the specific service definition
Attempting to setup a VPN, I get this...
Here are some of the same drops from the full firewall log
Why is this traffic…
Hallo an alle,
ich habe jetzt knapp zwei Abende rumprobiert eine IPSec verbindung zwischen der genannten FritzBox und der Sophos herzustellen.
Ich denke ich kenne mittlerweile jeden Artikel in dem es nur ansatzweise um VPN zwischen FritzBox und…
Hallo,
wir betreiben eine SG210 mit der Firmware 9.707-5.
ich hab seit ein paar Wochen das Problem, dass unser COM Server (nicht in der AD, IP 192.168.1.2) nicht mehr auf eine gegenstelle per SMB kommt.
Der Aufruf passiert im Mirth und soll über…
Hi,
I have UTM9 connected to modem, then modem connect to HQ firewall. How to setup ipsec site-to-site vpn connection using this setup?
Branch UTM9:
LAN (192.168.12.x) - LAN IP
WAN (192.168.0.x) - Local IP of Modem
Modem (175.x.x.x) - Public…
Hallo zusammen,
ich habe das Problem, dass auf einem iPhone eine VPN eingerichtet ist. Funktioniert auch alles einwandfrei, wenn die Verbindung über ein WLAN-Netzwerk mit öffentlicher IPv4-Adresse hergestellt wird. Nun zum eigentlichen Problem, das…
Hallo zusammen,
erste mal, dass ich hier poste. Sonst bin ich immer fündig geworden, aber hierbei brauch ich doch speziellen Input...
Ich stehe vor der Frage, ob ich einen IPSec Tunnel von einer SG330 <-> SG330 mit dem gleich Netzwerk aufbauen kann…
Hi we got the problem that all oure VPN-Client users get 3-6 Times a Day the following error:
Wed Mar 31 08:50:18 2021 Authenticate/Decrypt packet error: packet HMAC authentication failed Wed Mar 31 08:50:18 2021 Fatal decryption error (process_incoming_link…
Guten Morgen,
ich verzweifle gerade ein wenig an unserer Telefonanlage. Folgende Thematik:
Wir haben eine Sophos XG 125w (18er Version) Firewall hier hängen 3 Netze dran (1x Vodafone DSL, 1x Telekom DSL, 1x Telekom SIP Trunk). Ich habe probleme…
Hi Guys,
I'm running the latest UTM 9 (version 9.705-3). I have the following configuration:
LAN 1: 10.10.1.0/24
LAN 2: 10.10.2.0/24
SSL VPN Pool: 10.10.3.0/24
Everything works fine. I can log in with VPN users and they get allocated an IP address…
Hello,
i use Sophos UTM Home since years now, and im really happy with it:) But as the Sophos UTM is still missing the Open VPN Client possibility, and DNSCrypt DOH is also not possible, i was thinking to add an other FW as Fronted Firewall to configure…
I have five Draytek 2960 running IPSec VPNs to a Sophos XG230.
The Drayteks initiate the connection using IKE2.
I get an email from the Drayteks every 53 minutes saying the link dropped. (It reconnects.) IKE Phase 1 timeout is 28800 seconds, Phase…
Hi there.
I have a host machine with Sonicwall Global VPN Client installed on it that can't connect to the peer/destination. The network map looks something like this:
Host >>> UTM >>> Cisco ASA >>> Internet >>> VPN Target
I've been looking at this…
Dear all,
I have a serious problem with a VPN-Tunnel between a SophosUTM and a Barracuda CloudGen Firewall.
The Tunnel is established but I cant access anything from the other Site. When I run a ping I continuously see that ESP Packets between…
Hi,
We currently have a SSL-VPN profile for remote access with predefined certificates from Sophos.But I dont understand the way the certificates work in them.
Is it possible to generate different security certificate for different VPN profile?
…
Hey everyone,
I thoroughly followed the guide https://www.sophos.com/en-us/medialibrary/PDFs/documentation/utm90_Remote_Access_Via_L2TP_geng.pdf with my test setup of a SOPHOS UTM 9 essentials firewall edition.
I managed to get my client connecting…
Some Remote VPN users cant reach Admin Page and User Portal on both 4444/4443 respectively but pings and telnet work on those ports from the same system. Could it be public IP related problem?
Hello Everyone,
a customer of ours asked us a question about giving a Power-User a seperate DSL-Line with a static IP-Address for his home-office.
So here is my question:
Is it possible to give one single user an ssl-vpn profile that connects…
Hallo,
ich habe eine UTM9.5 172.17.2.1/24(PPPoE und DYNDNS) und eine RED10 172.17.3.1/24 (RED steht hinter einem Router, Unitymedia FritzBox)
Tunnel steht.
Beide haben einen DNS & DHCP Server.
Ich habe eine Maskierungsregel von UTM-> RED und von…
Hello Friends,
I am a new to Sophose, i have sophose UTM9 is installed & company employees are able connect through the Sophose SSL VPN client to Office resource.
Am able to ping to SSL VPN client machine & client machine is able to ping my machine…
Hallo Sophos Community,
ich zerbreche gerade mein Hirn an der funktionsweise der Site-to-Site VPN zwischen zwei UTMs.
Ich wollte wie in der Anleitung eine Site-to-Site VPN zwischen zwei Standorten herzustellen um zwischen mehreren VMs an unterschiedlichen…
Hi
We have a Sophos UTM 9 running firmware version 9.405-5 attempting to connect to Fortigate 60D firewall but no joy. The logs show no connection being made on either ends of the devices, public ip's are reachable from testing. The policy on both ends…
Hello,
We are having several customers that they host their solutions to our data center. Until now each customer had their own firewall and their own IP range. With the current configuration we used a different firewall brand for each customer. Each…