SSL VPN, nslookup ok, but no ping

Update 15.08.2017

SOLUTION 1

edit client openvpn config file and add / change these settings:

route-delay 2

register-dns

With assistence of Sophos Support it's possble to modify the UTM Config to include these settings in setup.exe ....

SOLUTION 2

I did a bigger dive to this Problem, because we had lot's of Clients running Windows 7 showing this issue. If you check with Wireshark you will see that the DNS requests are routed to the WLAN / LAN DNS Server, not the SSL VPN Adapter DNS Server. Restarting DNS-Client (dnscache) Service fixes the Problem after establishing the vpn Connections. It's horrible and the root cause of the Problem is not clear.

A useable fix should be this:

Assign the Users rights to the Service "dnscache" using a Domain GPO.

Computer / Policies / Windows Settings / Security Settings  / System Settings / DNS Client / Define -> Automatic
Add the User or Group and Allow Start, Stop and Pause Right.

Navigate to the SSL Config Folder:

C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config

If your config files Looks like:

ralf@194.194.194.194.ovpn create a text file with the Name ralf@194.194.194.194_up.bat containing this Code:

start /min cmd.exe /c "C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config\dnscache.cmd"
exit

Create in the same Folder a text file with the Name dnscache.cmd containing this Content:

echo ---------------------------- > c:\windows\temp\openvpn.txt 2>&1
date /t >> c:\windows\temp\openvpn.txt 2>&1
time /t >> c:\windows\temp\openvpn.txt 2>&1
net stop dnscache >> c:\windows\temp\openvpn.txt 2>&1
net start dnscache >> c:\windows\temp\openvpn.txt 2>&1

After establishing a new VPN Connection the Service dnscache will automatically restart and the Name Resolution should work.

Ralf Luithle

Luithle & Luithle IT Services

Can someone confirm, that this issue is fixed now in Sophos UTM? :)

I'm still happy with Securepoint SSL VPN Client, but it's buggy by QHD screen resolution (