Sophos SSL VPN installer won't run on latest Windows branch

I can remember issues with the certificate expired used to sign the installer. But this is some years ago. Maybe you find something like that in the event logs.

I could not quickly  find logging parameter for the OpenVPN client itself.

Hi IT IT5,

Thank you for reaching out to the Community! 

Could you please check the default certificate on the firewall is configured properly? 

Did you try to install SSL Client and configuration on the different workstations for testing? 

Thanks,

We did actually try multiple PC's after this with the same problems... it must not be a Windows issue. I will check the default certificate. How do I make sure the default cert is configured properly so that it wouldn't cause SSL VPN issues with the installer?

Hi IT IT5,

Check out the following Recommended Reads; it has a screenshot of the default certificate filled out.

Sophos XG Firewall: Troubleshooting 0 Byte SSL VPN File.

Thanks,

It would be exciting to know, if the installer worked on older versions of Windows 10. Or is this the first test of installations?

You wrote you tried to install OpenVPN - do you mean OpenVPN downloaded from internet or the client from your appliance?

You can also install the public OpenVPN Client and just import the config file - did you try this?

https://openvpn.net/community-resources/how-to-install-the-openvpn-gui-on-windows/

And look there in step 6 - this is the installer's certificate which may make trouble, if it is not trustworthy.

Can you verify, both your CAs on XG are not faulty? 

Check Default CA and SSL CA. Verify, there is data in it. 

Hello,

I had a similar issue before.

Tried to install it in different PCs and always got the "This App can't run on your PC", check if your .exe size is 0 bytes.

In my case, all the files sizes from the SSL VPN tab on the User Portal were 0 bytes and that happened because the pattern for all the modules (including SSLVPN Clients) failed to download and install.

I went to System Services > Services and restarted all of them.

I hope you have solved your issue by now.