This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect 2.2.9: Still problems with special characters

Hello.

Regarding to this thread I create a new one because it is closed already.

We have massive problems with special characters in passwords using Sophos Connect Client.

One year after the other users reported problems with special characters in the other threads, Sophos is still not able to solve this problem (or does not want to solve it)?

It's like a shame! Every one talks about higher and deeper security and Sophos invites me permament to webinars and wants to sell me permanent new security products but when our users have problems authenticating to VPN I have to tell them to use only a small pool of special characters?!?

Could anybody tell us if Sophos is still working on the problem and there is a plan for a new Connect client with no problems or if we need to look for other VPN clients (and consequently for other firewall manucaturers in the next update circle)?

And could anybody provide us a list with all "not allowed" characters in Connect client?

This thread was automatically locked due to age.

Top Replies

Vivek Jagad over 1 year ago +1 suggested

Hello Horsting , Thank you for reaching out to the community, there are couple of known issues will be fixed in future road map of the Sophos Connect client. 1.) NCL-1763 - password containing two consecutive…

0 Erick Jan over 1 year ago

Hi Horsting,

Thank you for reaching out to Sophos Community.

Apologies for the experience. I will be sending you a DM/PM concerning some information.

Also, would it be possible to share if you have an existing case #?

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Horsting over 1 year ago in reply to Erick Jan

Hello Erick Jan, thanks for quick reply. What do you mean with existing case? We did not open a ticket at sophos support or something else if you do mean this... We just knew the issues and waited for new Connect Client version but actually the user concerns are filling up our mailboxes...
Cancel
Vote Up 0 Vote Down

Cancel
0 Erick Jan over 1 year ago in reply to Horsting

Hi Horsting,

This is noted. I'm just checking if you have an existing case.

As I have sent you a PM/DM to verify if I have the correct information. Thank you and apologies.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 1 year ago in reply to Erick Jan

the latest CC versions are not known to have password issues. We've had them with the older versions.

Which version are you using and with which Firewall Firmware?

Local oder AD Users?
Cancel
Vote Up 0 Vote Down

Cancel
0 Horsting over 1 year ago in reply to LHerzog

We have issues with AD users in Connect Client 2.2.90.1104 (and already had issues with 2.2.75.0506, too) on SG430 with latest firmware 9.715-4.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 1 year ago in reply to Horsting

I don't have tested it with SG but we still have one I could test against. thought it was a VPN client issue, not firewall specific.

Can you tell what character causes issues?

Have listed some already here:

Sophos connect client 2.1.20.0309 - password with spaces in it fails login

Sophos connect client 2.1.20.0309 - login fails with password containing \ backslash

Sophos connect client 2.1.20.0309 - login fails with password beginning with # hashtag

and: if the AD user password contains #? in the password like Abc#?123 it fails to authenticate the user against the firewall.

Probably the post will be moved to the UTM forum...
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago

Hello Horsting ,

Thank you for reaching out to the community, there are couple of known issues will be fixed in future road map of the Sophos Connect client.
1.) NCL-1763 - password containing two consecutive double quote characters "" - Will fixed in Sophos Connect 2.3.
2.) NCL-1702 - Special Character issue with username containing "ã" character - Will be fixed in Sophos Connect 2.4.

Well we do not have the list as of now for the supported list of the special characters, but we'll try to update that soon.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Horsting over 1 year ago in reply to Vivek Jagad

Hello LHerzog and Vivek Jagad,

many thanks for your replies!!

LHerzog

- I can not exaclty tell you every character making problems but definitively the german "Umalute" ä ü ö and also ß making problems. Furthermore % $ § I think. Its a little complicated because I do not want the users to show or tell me his/her passwords so I do not know exactly what characters are causing problems and on what position in the passphrase these characters are. Some users just told me that this characters were the causes.

- I think it is realy just a Connect Client problem, becaus with the old SSL client there were no problems and users can log in to web frontend to generate OTP codes with there passwords, too.

Vivek Jagad

Do you know when the 2.4 will be released?

Erick Jan Also contacted me via PM and said that there will be an product manager contacting me to analyse our problem.

THANKS AGAIN TO ALL OF YOU!!
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Horsting

Well as of now we do not have a tentative date, but once released it will be posted and updated on the Sophos Community with the release notes. Horsting

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Horsting over 1 year ago in reply to Vivek Jagad

OK, thanks for the info. Is there any newsletter to subscribe to get this concrete information as soon as it is released?
Cancel
Vote Up 0 Vote Down

Cancel