Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 5302 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect client DNS issues with IOS devices

waghelak

Hello,

I am currently testing using sophos connect client and noticed i am not able to resolve any internal DNS hostnames with IOS devices.

This is working fine with SSL VPN.

Any ideas or workaround?

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    PS: It is not Sophos Connect. 

    I am not quite sure, what you are testing. Can you share a Screenshot of the iOS Phone? 

  • 0 in reply to LuCar Toni

    Hi,

    On the XG i have setup the section with Sophos Connect, i believe there is currently issue with the certificate side of things hence i am currently testing with preshared key.

    I have then downloaded the client from the user portal for the IOS device.

    "Configuration for IPsec VPN client for Apple iOS"

    The above installs a profile on the IOS device with the VPN settings.

    Let me know if you require further info.

    Thanks

  • 0 in reply to waghelak

    Are you talking about this KBA? 

    https://community.sophos.com/kb/en-us/123137

     

    Because this is kinda outdated: 

    Cisco VPN Client for Apple iOS is not available for iOS versions 6 or higher.

     

    Can you share some screenshots of your current solution? You are using the Onboard IPsec Client? 

  • 0 in reply to LuCar Toni

    Hi,

    No i have never used that setup.  See attached screenshot of the portal which is something that has been recently added re. configuration for IPSec VPN client for Apple IOS.  

    The configuration is linked to the Sophos Connect Client settings on the XG portal.  I have just setup the client settings and downloaded this settings via the portal which in turn installed a profile from Sophos with the IPSec settings. 

    I cant view or edit this being installed through a profile other than confirm its name and the IP it is trying to connect to.

     

  • 0 in reply to waghelak

    Hi waghelak,

    Sophos Connect Client is for Windows 7 and above and MacOS machines. We do not have our own IPSEC client for IOS and android. The configuration you have referred is aligened with Cisco connect.

    https://news.sophos.com/en-us/2016/05/13/xg-firewall-how-to-video-configure-an-ipsec-vpn-on-an-iphone/

    I would recommend you to configure with pre-shared key and the configuration file provided is no longer feasible to the current Cisco Anyconnect.

     We have removed Cisco Anyconnnect from  17.5 GA and you would need to configure usign L2TP IPsec connection.

  • 0 in reply to Aditya Patel

    Hi Aditya

    I am not sure i am following you, either Sophos are not aware what they supporting or i am confused.

    I am again repeating myself i have configured the VPN setup on the Sophos Connect client and i am downloading the setup using the Sophos XG user portal as shown in the attached in previous message.

    Surely if this is not supported maybe the portal should remove option to download this setup on the IOS device.

    Everything works as expected other than DNS.

    Thanks

  • 0 in reply to LuCar Toni

    Hi

    Just to update it seems the latest version has fixed the DNS issues on the IOS.

    Just waiting for the self cert issue to be resolved on the VPN.

    Thanks

  • +1 in reply to waghelak

    First of all. 

    There was a Cisco VPN Client (IPsec), which was supported. Cisco set this client end of life couple years ago. So basically this VPN Client is not there anymore. 

    https://www.cisco.com/c/en/us/products/collateral/security/vpn-client/end_of_life_c51-680819.html

    This IPsec Client uses the same techniques like Sophos Connect and Andriod / iOS onboard does. 

    So we renamed this tab on XG to Sophos Connect and build some specials in it. But the module is still the same. 

    It is kinda not true, that you are using Sophos Connect - And this causes this confusing. You are using a "basic IPsec Client" with XG. It relies on the config of Sophos Connect, but this is most likely because Sophos Connect uses a standard IPsec component. 

Reply
  • +1 in reply to waghelak

    First of all. 

    There was a Cisco VPN Client (IPsec), which was supported. Cisco set this client end of life couple years ago. So basically this VPN Client is not there anymore. 

    https://www.cisco.com/c/en/us/products/collateral/security/vpn-client/end_of_life_c51-680819.html

    This IPsec Client uses the same techniques like Sophos Connect and Andriod / iOS onboard does. 

    So we renamed this tab on XG to Sophos Connect and build some specials in it. But the module is still the same. 

    It is kinda not true, that you are using Sophos Connect - And this causes this confusing. You are using a "basic IPsec Client" with XG. It relies on the config of Sophos Connect, but this is most likely because Sophos Connect uses a standard IPsec component. 

Children
No Data