• Question about the Behavior of Site-to-Site VPN and Web Protection

    Hi Folks, I think I would find the Answer in the UTM Manual, but if someone knows the Answer, that would help very much -> I don't need to search then. My Question is: if I create an VPN Tunnel (tun0) to eg. openvpn for all the Traffic / surfing…
  • VPN bidirectionality

    Hi, I've configured VPN remote access. I can access the remote computers through the VPN, but I want the remote computers to be capable of accessing the computers that establish the VPN. I have a server on the remote site that must automatically place…
  • Single user getting regularly kicked from the SSL Remote Access VPN

    Hi all, I have a problem in UTM9 where one user keeps getting kicked off the VPN frequently. This seems to be isolated to this user. We use AD authentication and I have deleted and re-added the user in authentication services. I've also re-downloaded…
  • VPN Access from external network not working on UTM 9 VM

    Hi all, I'm new to Sophos UTM 9 in still in the learning curve. I have replaced my Forefront TMG VM with an UTM 9 VM on HyperV. I have configured the UTM 9 to publish my Exchange 2016 environment and that all works like a charm. OWA is redirected, mail…
  • How to use IPSec User VPN behind NAT

    We're having issues being able to connect to our new location's UTM behind our ISP's NAT'd public IP. I was able to get a site-to-site VPN connection working between our New Location and our other location's UTM by setting our other location's UTM to…
  • Windows file sharing over l2tp ipsec vpn

    I'm trying to connect remotely to a local pc to access its files. Remote connection to utm vpn server establishes successfully. I can see the shared folders of the pc behind the UTM. However, when I try to copy a remote file (behind the utm) to the…
  • How to automate sophos configuration?

    We are using cloud sophos utm ver 9.506-1 on AWS. We have setup the sophos vpn as the gateway to our AWS VPCs. We configured SSL VPN to allow users access to specific resources in specific VPCs. Whenever we add or remove AWS VPCs we need to log into the…
  • VPN SSL UTM9 to Mikrotik

    How to make VPN SSL(or IPSEC RSA) connection between UTM9 to Mikrotik ?
  • Site to site vpn ssl ping

    So I have successfully been able to establish a ssl site to site between two offices. I have added the local networks from each site to the ssl config and can see the firewall rules have been auto added. However I'm not able to reach some workstations…
  • Is this possible with SSL VPN?

    We have a group of users connecting into the UTM via SSL VPN. They then RDP to our RDS Server and connect to the session hosts to work. Is there a way to have the internal\external website open up automatically after successfully connecting to the…
  • Notification - "WARN-726 VPN connection using Site-to-Site is down" is not working

    Hello, there is a problem with our UTM9. The notification "WARN-726 VPN connection using Site-to-Site is down" is not working. Other one are working. What could be the reason and how can it be solved? FYI: Current firmware version is 9.506-2 Greetings…
  • SSL-VPN Assistance

    I am new to VPN kindly help. I downloaded ssl-vpn.exe package from the user portal which was already setup by someone else and when I installed it on my windows machine ( C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config ) following files…
  • UTP DNS over IPSEC

    Hi There, I am configuring a UTM to be used at a remote site on the end of an ADSL line. I have a testing ADSL line here at HQ so am trying to get everything working before shipping the hardware to the remote site. I have configured a site-to-site…
  • Can't see PC's over VPN

    Hey guys, so at this point I'm super frustrated. I tried to set up a VPN for many hours now, but I can't see anything inside the network once im connected. This problem exists under SSl as well as PPTP. Both connect just fine, but I can't connect…
  • How to create diffrent SSL-VPN profiles with diffrent security certificates?

    Hi, We currently have a SSL-VPN profile for remote access with predefined certificates from Sophos.But I dont understand the way the certificates work in them. Is it possible to generate different security certificate for different VPN profile? …
  • SSL VPN Public IP

    I'm new to firewalls so keep that in mind if I seem like i don't know what I'm doing. I'm setting up a SSL VPN for my company and I can't connect to my public ip. Whenever I try, i get a timeout. When I'm inside the internal network I can connect to…
  • Cloudwatch Event

    Hi, I was wondering whether someone might be able to help me write a cloudwatch event which would alert when a VPN connection is established and extract the username, time, source and destination IP addresses? Really appreciate any guidance or even…
  • Problems VPN Site to Site.

    Hi. Can you help me with this problem that appears in VPN configuration: 2018:01:23-17:04:57 shopos_amazon pluto[7027]: packet from xxx.xxx.xxx.xxx:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA 2018:01:23-17:05:23 shopos_amazon…
  • Zoneminder and UTM 9

    Hi All, This is more of a, "Hey, look what I found", in hopes it may help others looking at the same problem and need a workaround. This all started when I could not stream video from my Zoneminder (ZM) server when connected to my network through…
  • UTM DNS – Security Considerations

    Recently, I have been thinking about DNS security. This seems odd, since DNS lookups are unauthenticated. But DNS security definitely needs to be part of the implementation decisions. UTM DNS is an integral part of defenses for users on the Internal…
  • UTM 9.5 SSL-VPN und Wildcard Zertifikat

    Hallo Ihr lieben, ich habe folgendes Problem: DSL --> Fritzbox(LAN)192.168.0.1 --> Exposed Host --> Sophos eth0 (WAN)192.168.0.2 Sophos eth1 (LAN)172.17.2.1 --> Sophos übernimmt DHCP für Clients Sophos eth2 (DMZ)10.0.0.1 --> Sophos übernimmt DHCP…
  • L2TP IPSEC - unable to access internal pages on iPhone, Works on Android.

    Hi I am running UTM 9.506 and unable to figure why i cannot access some of the internal (sophos webadmin, user portal, webui for other devices), do not see any drops on the firewall logs. Everything works flawlessly on my android. Also tried the same…
  • iview ssl site to site

    Hi there, Small question, i've got two sites connected by SSLVPN Site to Site. All fine. Though, on remote site (client site) if i configure the remote log server (iView system on main site), the IP used by the remote UTM in order to push logs to the…
  • Site to site ipsec gives INVALID_ID_Information

    I have two Sophos UTM in two different networks. Both UTMs are sitting between external and internal subnet. I want both UTMs to be able to initiate connection. For gateway setting gateway type for both is set to initiate connection and gateway is public…
  • IPSec Tunnel goes down after 2,3 days.

    Hi All, We are having an issue with IPSec tunnel going down on two site after a few days. If we just plug another device to the switch then Tunnel comes back online. we have switch connecting through 4G modems connected back to our Sophos firewall…