Hello all, thank you for reading and hopefully someone has an answer or a workaround. We have the a Problem with DNS resolution on SophosConnect VPN Clients. If someone is connected with our vpn profile and has IPv6 enabled on the network interface…

I have a Sophos XG 85 v17 with a site-to-site vpn running to a Ubiquiti UDM Pro. The tunnel is working great despite DNS not resolving from either end through the tunnel. The XG subnet is 10.10.10.0/24 and the Ubiquiti subnet is 10.0.0.0/24. I can ping…

Hi, I got a Remote Access IPSEC working on an XGS2300 (v19). It worked but was unusably slow. Sophos support suggested I disable "Use as default gateway" and explicitely add resources VPN clients could see. I want them to see the entire LAN, and the…

Hi guys, I am using a Sophos XG v19 as gateway and try to connect via SSL VPN from a Linux notebook. I configured the SSL VPN as in the sophos own video-tutorial and I found some other tutorials showing the same steps. When I try to connect from…

Hello, I think i'm stupid. When i connect with the Sophos SSL VPN client and if I then try to access my NAS via DNS names, it is not found. If I \\myNAS. use it works. nslookup has a DNS request timed out, but he resolves it. Can someone tell me how…

We have moved over a customer from SSL vpn to IPSEC connect client vpn but now when they use the built in VPN on an Apple iphone it looks like they arent receiving the DNS server IP that is specified in the IPSEC remote access section on the Sophos XG…

Hi! I've installed the client of the SSL VPN. The connection works, but the DNS ip that the Sophos (XG 125) is releasing is fec0:0:0:ffff::1%1 . Under Network -> DNS I've selected Choose IPv4 DNS server over IPv6 . I can ping Internet DNSs, but not internal…

Hi there, Sophsos Connect v2.1.20.0309 + SophosXG 18.5.2 + Windows 10 1809 After a certain time the name resolution does not work anymore, only "nslookup". Restarting the device, this works again for a certain time. There are some problems with "sophos…

Hi All, We have a ipsec tunnel from the Branch office to the Head office. We used this KB ( https://support.sophos.com/support/s/article/KB-000035798?language=en_US ) to route traffic from a specific subnet at the branch office to the WAN of the Head…

Is it possible to setup 2 groups for SSL VPN where each group has its own DNS settings? I have 2 AD domains on my LAN and want to have clients for AD1 get the AD1 DNS servers and the AD2 clients get AD2 DNS servers. Thanks.

System Configuration: 2x XG125s in an HA Pair running SFOS 17.5.15 MR-15. We have two ISP connections feeding separate unmanaged switches which feed Two WAN ports on both units. (ISP->UNMANAGED SWITCH->WAN Port). This enables failover for ISP Failure…

[EDIT] I misunderstood how DNS queries to addresses like 8.8.8.8 are routed. They do go through the VPN tunnel. My question -- which I can't seem to delete, so I am rewriting -- had to do with wanting to make the XGS be my DNS server, through an SSL…

Hi All, I'm currently testing migrating from the SSL VPN client to using The Connect Client with ipsec. I've set everything up and can connect without issue. I'm also able to resolve devices within the lan, ping them, access resources but no matter…

We have a public wildcard DNS record configured (*.domain.com) so if someone puts in asdf.domain.com, it will still go to our main website www.domain.com. On the Sophos firewall, I have set up many DNS host entries in Network --> DNS, with the idea…

We noticed that webpages and email photos are loading slow on our XG125 Even the web interface for the XG Firewall seems to load slowly we have checked with our ISP and there are no problems with our cable modem, we also disabled the IPS and Web filtering…

I'll try to keep this short and concise with helpful images where appropriate. For Ubuntu 20.04, I download the OpenVPN config "for Android", because "for other OSs" does not work. Using the gnome network manager, I import the OpenVPN file. I'm able…

I have a XG Firewall with an active SSL VPN. I'm now trying out Sophos Connect as an alternative / replacement and so far I was able to connect from my client to the firewall and access the resources as long as I access everything via the IP address.…

Hi! Currently I'm planning a deployment of an XG system at a customer site. We have to do a "soft switch" from the old firewall to the new one, because of the remote access VPN, which are already deployed. For the most part I don't see any major problems…

Hallo, zwischen unserer Domäne und dem Modem sitzt eine Sophos UTM9. Seit einer Woche versuche ich das VPN so aufzubauen, daß ich mit einem iPhone von außen per Fernzugriff auf einen Filemaker-Server in der Domäne zugreifen kann. Den Datenbankzugriff…

Hello, I've added a small number of static DNS host entries to a XG125w and they work within the local LAN. However, the hosts do not resolve when a user remotely connects through VPN (L2TP). Any idea of how to resolve this? I found this similar…

Hi, I am a new person to the Sophos XG environment, but I am having a perplexing issue that I can't figure out for the life of me. When non domain devices are connecting via the SSL VPN, they are unable to resolve any server by DNS name. When…

Hello everyone, I need help for a Projet I am working on: We need to setup a VPN Tunnel between 2 sites, let's say HQ and Branch. HQ has a Fortigate 80D with a Static IP, Branch has a Sophos XG (Cyberoam Cr25iNG upgrade) with dynamic IP. I have…

I have two deliberately independent LANs each with their own address space, DHCP and DNS servers. It all works, each LAN can contact the WAN but not the other LAN. SSL VPN is set up so that Users are assigned to one of two Groups: LAN-A or LAN-B, and…

Hallo zusammen! Ich hoffe ihr könnt mir helfen. Folgendes Szenario: Wir haben eine UTM9 (SG430) im Einsatz. Wenn ein Client sich per VPN verbindet, kriegt er eine 192.168.175.X Adresse vom DHCP der UTM. Dieser DNS Eintrag registriert sich…

I have created an L2TP connection. the connection is being made and the user is authenticating. After connecting, I can ping internal and internet resources by address. I can ping internet resources by name, but not internal. I have added…