• RE: UTM DNS not working when connected with SSL VPN

    I am having the same issue on my UTM 9 firmware 9.405-5. I have confirmed my internal DNS IP is listed under Remote Access > Advanced. Users cannot connect to shared drives after they connect to the VPN. I can't ping the server name either. I can ping…
  • Site to Site IPsec VPN with Lancom using 1:1 NAT

    Hello Guys, i have the following Problem: I have 2 LANs that i need to connect via VPN. one with the UTM 9 and one with Lancom Router. Both sites have deferent IP-Ranges, but unfortunatly the IP-Range from the UTM side is allready used for a deferent…
  • Internal DNS name resolution not working on L2TP over IPsec VPN - No server running, trying to use UTM

    We have an L2TP over IPsec VPN that works but I'm trying to optimize it. (My networking knowledge is not great, i've searched for several hours on the web looking for solutions before asking here) I can't figure out how to get the UTM to act as our…
  • UTM 9 - PPTP VPN using external DHCP provides the same ip to all the remote vpn clients

    So I had my PPTP VPN up un running, I added a external DHCP due routing issues and everything was woking fine , until user2 tried to connect at the same time as user1, both are getting the same ip. I believe this is due the mac address of the Sophos…
  • RE: IPSec VPN with two Internet Links

    Hi, Yes, i did. I just noticed that, if i set que Interface B as default gateway, it works! Than, i change the configuration to set the interface A as default gateway again, and the VPN keeps working. It looks like the interface needs to be the default…
  • IPSec VPN with two Internet Links

    Hey guys, I have a site-to-site IPSec VPN running very well, and i've just assigned another Internet connection; Interface A: 150MB dinamic IP Interface B: 10MB static IP My VPN is running trough Interface A, but im tired of interruptions every…
  • L2TP over IPSec connection fails with double NAT setup

    We're trying to setup VPN access for workers working from home using L2TP over IPSec. Testing from the LAN all goes well, but when trying to connect from outside of the LAN, we get this error: 2016:06:28-10:36:47 motif pluto[18344]: "L_for Remote Users…
  • L2TP/IPsec fails when WAN port configured with private IP

    We have an SG230 in a remote facility which we must make VPN connections to, preferably over L2TP/IPsec. The problem is that they haven't provided us with a public IP per se, instead they have given us a private IP which is 1:1 NATed in their firewall…
  • IPsec VPN no log shows failed connections for IPSec...

    Hi I have setup IPSec and SSL VPN with AD approval. In "Logging and reporting" >"Remote access">"Sessions" I can't see Failed connections for IPSec. Only SSL. In Connections and Current Connections I see data for IPSec and SSL. Is this normal?
  • adding failover SSL VPN server(s) to the client config?

    Is there any way to 'customize' the SSL vpn client config? It's nice the sophos bundles the install (S/W as well as cert/key/config), but haven't found a way to be able to add some directives... specifically, want to add additional "remote" lines. I see…
  • Can't authenticate IPsec VPN iOS client using AD group. AD users works fine.

    As above. I'm using AD authentication with STAS. I have SSL-VPN and L2TP VPN working just fine to authenticate AD groups. But the Cisco IPsec VPN just won't work. If I put individual AD users in the User and Groups list, it works just fine. But if I…
  • Have VPN listen on both UDP and TCP

    Hi All, we switched our SSL VPN over to UDP, which improved transfer speeds significantly. Just a couple users sometimes have issues through it since the change, maybe due to their connection (at home). Could we please have the option to enable…
  • OpenVPN where are the options ?

    While setting up the SSL VPN I was able to make a few configurations on my test remote client with multiple working VPN connections to the Sophos UTM all using the SSL VPN. But when I clean up and setup, how I would like, I found out that the user portal…
  • Error message attempting to get the install key file from the Remote Access tab of the UTM User Portal

    When I login to the UTM User Portal, go to the Remote Access tab, and click on the Install button to ".. install the SSL VPN configuration on (my) iOS™ device", I get the message " Error getting SSLVPN package, subtype config, user REF_AaaUseBthomson…
  • Using Active Directory to Authenticate Selected VPN Users

    I would like to set up a VPN at the company office, but limit access to only selected user accounts on our Windows Server. I have successfully created the Authentication Server in Definitions and Users, Authentication Services. The Test server settings…
  • RE: SSL Vpn public IP

    Hi Rob (Robb?), I just got my VPN going in the last couple weeks, so I am hardly an expert, but let me give it a try: Before you connect to your Sophos UTM OpenSSL VPN, your device (e.g., laptop) has a public IP address (as you put it, "aaa,bbb,ccc…
  • RE: Help with SSL VPN Mandatory (Full) Tunnel

    Okay, Bob was great with his help for that mandatory tunnel VPN. (Thank you, Bob). But... I just discovered that my MacBook Pro is still split tunneling through IPv6. :-o Is there a Sophos UTM solution to force IPv6 through the Sophos UTM, or automatically…
  • SSL VPN Cannot Connect

    I have just setup SG 125 using UTM 9.3. I have been trying to get the SSL VPN to work and been unsuccessful. I had help directly from Sophos for the setup as well as I have double-checked my setup from the guides. Our main DNS/AD server is a Small business…
  • S2S IPSEC VPN throughput/performance issue with Exchange

    We are seeing some performance issues on our IPSEC VPN connected WAN. We have a remote office connected through a S2S IPSEC VPN. Both WAN connections are Comcast Business 150/25 Mbps We are both on SG210 appliances - latest and greatest firmware…
  • SSL VPN - Connect, but no traffic

    We are setting up a new UTM 9, and cannot get traffic to flow to the local lan through the VPN. We can connect, and ping our own station, but we are unable to ping any address on the local network.
  • Site to site being blocked by Intrusion Protection

    So the other day I did my every couple of months bounce of my comcast modem. As this is recommended by them and normally everything goes just fine. However I was having some issues with my additional addresses but once I called Comcast they magically…
  • ADDS users locked out when connected via L2TP or PPTP RAS

    Hi there, we have several domain-joined Windows 7 PCs for home office which connect via Sophos RAS (pptp & L2TP). The VPN user is authenticated against a radius Server (RSA Token) behind the UTM 9. All connections over the VPN in our domain work well…
  • SSL VPN network adapter reported with 10MBit/s

    I have Sophos SSL VPN Client 2.1 installed (Win7 x64 machine) to connect to a client's network. When I check the SSL VPN network adapter it's reported to have only a speed of 10 MBit/s. Any way to change this to make the connection faster (because the…
  • UTM to UTM link aggregation?

    Hi! Just a quick question: When connecting two UTM using a RED tunnel, is it possible to aggregate/bond WAN links on one of them in order to get a higher throughput? I need to connect a branch office using two or three slow DSL lines to the main office…