This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS over SSLVPN and WIFI

Etienne Hovington over 1 year ago

Hi,

We are having a weird situation with our UTM9

Laptops connected trough an ethernet calbe are able to access servers by their hostname

But when connected trough WIFI or SSLVPN they are only able to access servers trough their IP not their hostname...

A sophos engineer said our DHCP/DNS configuration on the UTM was fine and yet it is not working on the WIFI / SSL

We are able to ping both DNS IP.

Everything was working fine on the sslvpn until two weeks ago

Only change made to the sslvpn was a NAT rule to allow user to access a server on a remote location (site to site vpn)

Please Help !!

This thread was automatically locked due to age.

0 Amodin over 1 year ago

Is your SSL VPN pool allowed in the DNS > Global > Allowed Networks field?

The NAT might be doing something with redirection, as if I remember right it acts before any firewall rules. My brain is a bit hazy from lack of sleep at the moment, I'll return once I can clear up some of this fog in my head.

PFSense Plus 23.05 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | Fiber Conn (awaiting ATT Fiber)
(Former Sophos UTM Veteran, XG Rookie)
Cancel
Vote Up 0 Vote Down

Cancel
0 Etienne Hovington over 1 year ago in reply to Amodin

Yes it is allowed in the "allowed networks " !

We will try disabling the nat when no one is working !
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 1 year ago in reply to Etienne Hovington

How does your setup compare to DNS best practice?

You might also want to consult #2 in Rulz (last updated 2021-02-16).

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Etienne Hovington over 1 year ago in reply to BAlfson

I will verify that and come back to you thanks !
Cancel
Vote Up 0 Vote Down

Cancel
0 Etienne Hovington over 1 year ago in reply to BAlfson

I also noticed hat trough the VPN i'm able to remote into a pc using the IP or FQDN, but not by the hostname
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 1 year ago in reply to Etienne Hovington

That would most likely indicate your DNS is incorrect then with your setup.

PFSense Plus 23.05 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | Fiber Conn (awaiting ATT Fiber)
(Former Sophos UTM Veteran, XG Rookie)
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch over 1 year ago in reply to Amodin

Hello Etienne,

do you push the DNS-settings to your SSL-VPN-Clients like in this screenshot?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch over 1 year ago in reply to PhilippRusch

Did you already check your DNS-Setup?

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Etienne Hovington over 1 year ago in reply to PhilippRusch

Yes this is correctly set-up
Cancel
Vote Up 0 Vote Down

Cancel
0 Etienne Hovington over 1 year ago in reply to PhilippRusch

Not sure why but it seem's to be working fine now. I will investigate further. thanks
Cancel
Vote Up 0 Vote Down

Cancel