From my Android phone using openvpn and the ovpn config from my Sophos box, I can connect to my network. I can get to my servers from using their IP, but I cannot get hostnames to resolve. In System > Administration I have DNS turned on for VPN 10…

Hi, I've deployed doznes of SSL VPN clients, having DNS set to on-premises AD LAN DNS server 10.1.1.10 in General SSL VPN settings for all clients. Now when client with laptop connects to SSL VPN, I can see his/her default DNS resolving goes through…

Hi there, After the firmware update to SFOS 20.0.1 MR-1-Build342, we have rolled out the Sophos Connect Client v2.3.1. It turns out that DNS resolution does not work with IPsec. It looks like the wrong DNS servers are being entered here (ipv6). With SSL…

Hello, We have an application that requires reverse DNS lookup. When users are on SSL VPN they are getting a new IP address via dhcp on the firewall frequently and the Ip Address does not get a PTR record created in the reverse lookup. I've seen…

Recently, I had a problem with a client and their VPN. I noticed that when connecting to the VPN using Sophos Connect, all the DNS requests I make are resolved by the XG. In other words, when I run an nslookup google.com while connected to the VPN, the…

Hello, regarding to this post: LLMNR disabled - DNS resolution no longer works over VPN when will version 2.3 of sophos connect be published? kind regards

I have some services running on a local server behind a reverse proxy and those services are protected from access outside IP subnets not specified in the reverse proxy settings. In my local router, I have the addresses for all these services listed…

On my phone connected via OVPN I can access local network resources by IP but name resolution won't work. VPN: SSL VPN (remote access) I have Policy Members setup Use as default gateway is on Permitted network sources IPv4 is set to my local LAN VPN…

Hi, when using SSLVPN in split-tunnel mode, DNS resolution to internal resources is not possible. A ping returns "Host not found". When I perform a nslookup, the XGS is contacted and resolves successfully. I've also tried several VPN clients, including…

Hi Sophos Community, I've got a XGS126 on SFOS 19.5.3 with IPsec and SSL VPN enabled. Now my client wants to use VPN to connect to certain Windows machines in the LAN over RDP using the NetBIOS names. Is there a way to do name resolution on the XGS…

Hi, following problem. We use Sophos Connect Client version 2.2.90.1104 on Windows 10 and 11 and IPSec VPN. We set a prefered DNS on firewall. After the VPN connect, the DNS server is set on the VPN adapter settings in Windows. Than the problem began…

Hello all, We have deactivated LLMNR via GPO. After that we had the problem that users who work via VPN have more DNS problems. No problems could be found in the internal network. In 90% of the cases, internal resources can no longer be resolved.…

Hello What are correct DNS settings for IPsec remote access client so it would use DNS host entries from firewall?

Hello! We are using a Hardware Firewall XGS-2100 to connect to two datacenters running our AD Controller there. The AD is also our DNS Server. This worked fine for a long time. For some reason one of the VPN stopped working and one of the AD Controller…

Windows clients work fine and can resolve domain.server.local names just fine over vpn. ios clients on local wifi resolve fine. ios clients on vpn (openvpn) cannot find domain.server.local domain is set in vpn settings, dns server ip is set in vpn…

If someone also has the problem that the Sophos Connect client doesn't replace the DNS addresses then you've found a bug: "This is known to the Sophos Dev team and is going to be fixed with Sophos Connect 2.3 with ID NCL-1383" If you have a client…

Hi, our Windows 10 users use Connect Client 2.2.90 with the infamous .pro file to tonnect to XG 19.5.2 Firewall with SSL VPN TCP and access internal resources. The SSL VPN clients use the XG firewall as DNS resolver. The XG uses DNS forward rule for…

Good morning everyone, on sophos XGS I configured the client-site SSL VPN, everything works except the resolution of internal names, probably because our internal windows domain has the same name as a public domain that is not ours (I know it's a bad…

Hello! I have a need for configuration that has never been necessary before. I have remote users using SSL VPN. In my global SSL VPN settings I give my two internal DNS servers and also the company domain so that name resolution for internal services…

Hi; We have a large server farm behind sophos firewall. There are different domain name AD servers available. I can authenticate users over ADs with these different domains. I can also use AD authentication on SSL VPN connections. No problem till this…

Hello everyone. I have 2 XGS Firewalls connected via SSL Site2Site VPN, which works good. I created a DNS Request Route for contoso.com (changed of course to my setup) to go to DC DNS IP in main office. This worked for quite some time, now it does…

VPN is working fine IP-wise. I can ping all the servers do RDP, the whole shebang. However when I try to ping *.mydomain.local from the HO VPN network I get the message that it couldn't be resolved. I configured DNS-requests routes in both appliances…

Hi, I have a user using SSL VPN (Remote Access) to connect to the office. This worked good over the last months, but we're now having strange issues: After a short ( but undefined) period of time, he's unable to access any internal web resources…

Hello everyone, I need to get some SSL VPN users to a server with a local URL ("">">http://myurl.local"). The steps I followed: 1) My Xgs2300 has the two domain controllers and google's dns as its dns server 2) Configured a VPN policy only for these users…

Google searching not successful; how do I set up the DHCP server "dns settings" to push from an XG to a remote Red60 (i.e. client laptop needs to see our domain suffix + name servers)