Buenas tardes, Me pueden ayudar por favor con algún comando o instrucción para forzar la desinstalación de la VPN "SSL VPN Sophos (Semáforo)" de forma desatendida (Remota) en 150 equipos para luego actualizar e instalar a Sophos Connect, Muchas gracias…

Hello, we are doing a migration from old XG330 to a XGS3300 I have a question regarding the sophos connect client, which is currently used with the XG. the current sophos client is openvpn 2.3.8 The new one is in version 2.3, but, do we have a…

So I've seen some articles around on how to setup a Sophos to Azure site to site using tunnel interface, however all my research and talking with Sophos indicates this can only work if the Sophos firewall has a static IP on the WAN. In my scenerio, the…

Case is not resolved. Please open the case. Sophos team has migrated cyberoam to Sophos firewall & Its working properly from last 3years with Cyberaom certificate which expiry is 2036. The issue is Sophos connect 2.3 is not working but 2.2 & 2…

I have a Route based VPN from SOPHOS to SOPHOS. I need to create a loopback to allow a connection back to a server. I am not able to find any information regarding this. In fact from what I can see I am not sure I can even do this with a normal IPSEC…

I have the same problem as described in the following post: RE: LLMNR disabled - DNS resolution no longer works over VPN I have now updated to 20v1 MR1 and installed the current Connect Client. Unfortunately, the error is still not fixed with Sophos…

Recently, I had a problem with a client and their VPN. I noticed that when connecting to the VPN using Sophos Connect, all the DNS requests I make are resolved by the XG. In other words, when I run an nslookup google.com while connected to the VPN, the…

We are experiencing a very strange effect with the Sophos Connect 2.2.90 client We use SSL VPN connections for users. Users load the profile from the user portal and import it into the client. The connection works fine, but when the user switches networks…

I want to deploy Sophos Connect 2.3 to a group of computers before we install the firewall at the site and push the provisioning file. File is easy, but the GPO to install the Connect Client, while applied to the computer, never installs. We have a company…

Hello, everyone. I would like to hear from you about your experience. Thank you in advance. Sophos version: 19.5.4 I have two questions. First (1) - Our company is going through a name (identity) transition. We are no longer called XYZ but ABC. Our provisioning…

Every time I wanted to connect to a VPN via Sophos connect the connection was established for the first time but then the Sophos TAP Adapter card displayed unidentified network, The temporary solution is to deactivate/activate the card to be able to connect…

Hello, I am experiencing the issues listed in NC-120119 when I am using TCP mode for my SSL VPNs. I have a select number of users who I required to get a static IP address, however when they are connected, if they change network type and it tries…

Hello, I have Sophos XG 2300 with firmware 19.5.3 MR-3. I'm trying to set a static IP address for a site-to-site SSL VPN client. Is there any way to achieve this? Whatever I do it keeps getting leased IP address from Global DHCP pool or the VPN…

Hello, we have a single remote user at our organization using the Remote SSL VPN group. We do not use AD to sync passwords or anything. they are just set by the Admin. He emailed me today saying that his password expired, and he can log-in to the VPN…

Hi, One of our customer has Sophos SSL VPN in Sophos XGS Firewall and they are dialing through Sophos Connect Client. Now, they want to auto connect in Windows 11 Pro, when the Laptop power on.. I have gone through some articles and i couldn't get any…

Hi I am trying to ping/RDP L2TP client from Main office but unable to access but through L2TP client I can access my office network. Thank you Policy tester Rules and policies NAT Rule

So we are moving away from Citrix for our remote access. However we still need to access some applications internally. I have been working on trying to implement this using Entra App Proxy and the Web Client. This has proved to be an unsolvable nightmare…

Received IKE message with invalid SPI (F5D1C2B8) from the remote gateway. Received IKE message with invalid SPI (2AE78327) from the remote gateway. What could be the issue and how to solve it?

Hello I have Paralels Windows machine on MAC and I cannot install Sophos Connect. The message is Sophos Connect Setup Wizard ended prematurely MAC OS SONOMA ver. 14.3 Paralels ver. 19.3.0(54924) Windows11 ver 22H2 Sophos Connect ver. 2.3.0 …

With my license renewal fast approaching and my XG125 rev3 EOL I am at a cross roads as to which vendor I should move forward with. Out of pure frustration, I got my hands on a Fortigate 80F to compare SSLVPN and IPSecVPN remote access throughput. I setup…

Hello, newbie here with Sophos. I am looking at a (new) client I have inherited who have their servers being backed up locally and then across a site to site VPN to a secondary location. There is one server on a different subnet that has never been…

I am trying to establish a Route based site-to-site IPSec VPN connection between two Sophos XG Firewalls (all fully up to date) - I followed this recipe . I have two subnets on the 'HeadOffice' Firewall - 192.168.22.0/24 and 192.168.23.0/24 and I have…

Good day, On our XG230 [ SFOS 20.0.0 GA-Build222] we have two IPsec site-to-site tunnels on two different GWs. Both connect to the same remote GW but use Different NATed local Subnets to Fortigate Firewall. IPSec policies are the same no change there…

Hi, With the noon version of Sophos Connect v2.3 against SFOS v20 MR1, I encountered a bug in the delayed disconnection of SSL VPN server-side (XG Sophos firewall). On the client side the connection is already in a disconnected state, but on the firewall…

Hey All, I've created an IPsec tunnel between my Sophos XGS unit and a Meraki with the Sophos unit initiating the connection. Traffic is passing just fine, but the location where the Sophos unit is located has somewhat spotty internet. It appears…