Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 6492 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN initial is slow and taking a bit long time at "Waiting for Server Reply"

Deepak Verma

Hi,

My SSL VPN is taking some time during the Initial phase. It will take 30 to 50 seconds on "Waiting for Server Reply" on Android and desktop as well. I tested on different-2 system and locations as well. It is working on UDP.

 

Regards,

Deepak Kumar



This thread was automatically locked due to age.
  • 0

    Seems like the TCP Handshake has a problem. 

    You could dig deeper in this issue with a tcpdump on XG and reproduce the issue.

    https://community.sophos.com/kb/en-us/127647

  • +1

    HI,

    We find out the issue and it belongs to the VPN Configuration file.

    Here are the remote host details at the end of VPN configurations:

    remote 86.98.4.xx 1043
    remote 10.10.xx.xx 1043
    remote 10.255.xx.xx 1043
    remote xxxxxx.myfirewall.co 1043

    Now, I am having a dynamic IP and my public IP got changes due to system restart or ISP disconnection. The VPN client will start trying to negotiation from top to down and wait till to timeout.  I make some changes as DynDNS moved to the top and removed the public IP entry from the configuration and it is working fine.'

    I am not sure why Sophos is not thinking to keep DynDNS on the top If I have configured a DynDNS on the firewall and why is it adding my LAN Interface IP in the VPN configuration file?