Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 8 subscribers
  • Views 4524 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos SSL VPN - Verbindung unter Win10 per CLI oder Powershell herstellen

Stefan Kusiek

Hallo

Habe eine Sophos UTM Version 9.7 ...
Sophos VPN Client ist lokal installiert ...
das Hertstellen von dem RemotePC (Win10) der SSL VPN-Verbindung über die GUI klappt prima ...

Nun möchte ich die Verbindung per Script über CLI herstellen ... bin bis jetzt bis 

      openvpn.exe --config $file --auth-user-pass $auth             oder

      openvpn.exe --config $file --auth-user-pass 

gekommen ...

PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin> $auth = "pass.txt"     (2 Zeilen eine mit User und eine mit Passwort)
PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin> $file = “C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config\xxx@xxx.ovpn”
PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin> openvpn --config $file

   Sun Oct 25 06:07:37 2020 DEPRECATED OPTION: --tls-remote, please update your configuration
   Sun Oct 25 06:07:37 2020 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Oct 30 2018
   Sun Oct 25 06:07:37 2020 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.09

   5 Minuten später  ...   STRG + C  ... hatte keine weitere Geduld

PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin>

könnte jetzt etwas Hilfe gebrauchen

Stefan

--------------------------

Hello

I have a Sophos UTM version 9.7 ...
Sophos VPN Client is installed locally ...
The remote PC (Win10) can use the SSL VPN connection via the GUI  and it works very well ...

Now I would like to establish the connection via script via CLI ... i start with

      openvpn.exe --config $file --auth-user-pass $auth             or

      openvpn.exe --config $file --auth-user-pass 

PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin> $auth = "pass.txt"     (2 Lines with username and pasword)
PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin> $file = “C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config\xxx@xxx.ovpn”
PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin> openvpn --config $file

   Sun Oct 25 06:07:37 2020 DEPRECATED OPTION: --tls-remote, please update your configuration
   Sun Oct 25 06:07:37 2020 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Oct 30 2018
   Sun Oct 25 06:07:37 2020 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.09

   5 minutes later   ...   STRG + C  ... I was out of patience

PS C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin>

can you assits me please

Stefan



This thread was automatically locked due to age.
Parents
  • 0

    Hi 

    depending on your VPN client version, you might need to change your ovpn-configuration file. 

    replace the line 

    tls-remote "C=country ....

    with 

    verify-x509-name "C=country ....

    regards

    oly 

  • 0 in reply to oly s

    It is the same VPN client (Sophos VPN Client) ... and the same configuration (ovpn-file generated by Sophos UTM) ... in the GUI version it work ... in the CLI version NOT ...

  • 0 in reply to Stefan Kusiek

    Hi

    was not really the question ,-) 

    if you are on 9.7 your VPN client is most likely 2.3.x - have you retried, after changing the ovpn configuration file?

    Copy the generated ovpn file, change the "tls-remote" to "verify-x509-name " - will also work from the GUI.

    Depending on your Win10 setup you might need to run Powershell as Administrator.

    regards

    oly 

     

Reply
  • 0 in reply to Stefan Kusiek

    Hi

    was not really the question ,-) 

    if you are on 9.7 your VPN client is most likely 2.3.x - have you retried, after changing the ovpn configuration file?

    Copy the generated ovpn file, change the "tls-remote" to "verify-x509-name " - will also work from the GUI.

    Depending on your Win10 setup you might need to run Powershell as Administrator.

    regards

    oly 

     

Children
No Data
Unfiltered HTML