SSL VPN Client issue

Question

When connected to VPN using the Sophos SSL vpn client the internet connection slows down to a halt but restores after disconnecting from VPN. This issue does not occur for other users, the application has been run as an administrator, DNS settings are set to automatic and there does not appear to be any firewall issues. 
 Thu Apr 04 14:28:00 2019 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Apr 04 14:28:00 2019 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu Apr 04 14:28:00 2019 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Apr 04 14:28:00 2019 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu Apr 04 14:28:00 2019 [sophos1.trakcel.com] Peer Connection Initiated with [AF_INET]188.39.27.194:443 Thu Apr 04 14:28:01 2019 MANAGEMENT: >STATE:1554384481,GET_CONFIG,,,,,, Thu Apr 04 14:28:02 2019 SENT CONTROL [sophos1.trakcel.com]: 'PUSH_REQUEST' (status=1) Thu Apr 04 14:28:03 2019 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.10.36.1,route-gateway 10.10.36.1,topology subnet,ping 10,ping-restart 120,redirect-gateway def1,dhcp-option DNS 10.10.10.0,dhcp-option DNS 10.0.100.1,dhcp-option WINS 10.0.100.16,dhcp-option WINS 10.0.100.216,dhcp-option DOMAIN trakcel.com,ifconfig 10.10.36.8 255.255.255.0' Thu Apr 04 14:28:03 2019 OPTIONS IMPORT: timers and/or timeouts modified Thu Apr 04 14:28:03 2019 OPTIONS IMPORT: --ifconfig/up options modified Thu Apr 04 14:28:03 2019 OPTIONS IMPORT: route options modified Thu Apr 04 14:28:03 2019 OPTIONS IMPORT: route-related options modified Thu Apr 04 14:28:03 2019 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Thu Apr 04 14:28:03 2019 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=16 HWADDR=d0:53:49:8b:fa:10 Thu Apr 04 14:28:03 2019 open_tun, tt->ipv6=0 Thu Apr 04 14:28:03 2019 TAP-WIN32 device [Ethernet 2] opened: \.\Global\{1AB596FF-E72F-4EA9-AF32-6A508A7A4A17}.tap Thu Apr 04 14:28:03 2019 TAP-Windows Driver Version 9.21 Thu Apr 04 14:28:03 2019 Set TAP-Windows TUN subnet mode network/local/netmask = 10.10.36.0/10.10.36.8/255.255.255.0 [SUCCEEDED] Thu Apr 04 14:28:03 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.36.8/255.255.255.0 on interface {1AB596FF-E72F-4EA9-AF32-6A508A7A4A17} [DHCP-serv: 10.10.36.254, lease-time: 31536000] Thu Apr 04 14:28:03 2019 Successful ARP Flush on interface [7] {1AB596FF-E72F-4EA9-AF32-6A508A7A4A17} Thu Apr 04 14:28:03 2019 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu Apr 04 14:28:03 2019 MANAGEMENT: >STATE:1554384483,ASSIGN_IP,,10.10.36.8,,,, Thu Apr 04 14:28:07 2019 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Thu Apr 04 14:28:07 2019 C:\WINDOWS\system32oute.exe ADD 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:28:07 2019 Route addition via service succeeded Thu Apr 04 14:28:07 2019 C:\WINDOWS\system32oute.exe ADD 0.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:28:07 2019 Route addition via service succeeded Thu Apr 04 14:28:07 2019 C:\WINDOWS\system32oute.exe ADD 128.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:28:07 2019 Route addition via service succeeded Thu Apr 04 14:28:07 2019 MANAGEMENT: >STATE:1554384487,ADD_ROUTES,,,,,, Thu Apr 04 14:28:07 2019 C:\WINDOWS\system32oute.exe ADD 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:28:07 2019 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=16] Thu Apr 04 14:28:07 2019 Route addition via service failed Thu Apr 04 14:28:07 2019 Initialization Sequence Completed Thu Apr 04 14:28:07 2019 MANAGEMENT: >STATE:1554384487,CONNECTED,SUCCESS,10.10.36.8,188.39.27.194,443,, Thu Apr 04 14:30:39 2019 [sophos1.trakcel.com] Inactivity timeout (--ping-restart), restarting Thu Apr 04 14:30:39 2019 SIGUSR1[soft,ping-restart] received, process restarting Thu Apr 04 14:30:39 2019 MANAGEMENT: >STATE:1554384639,RECONNECTING,ping-restart,,,,, Thu Apr 04 14:30:39 2019 Restart pause, 2 second(s) Thu Apr 04 14:30:41 2019 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu Apr 04 14:30:41 2019 MANAGEMENT: >STATE:1554384641,RESOLVE,,,,,, Thu Apr 04 14:30:52 2019 UDPv4 link local: [undef] Thu Apr 04 14:30:52 2019 UDPv4 link remote: [AF_INET]188.39.27.194:443 Thu Apr 04 14:30:52 2019 MANAGEMENT: >STATE:1554384652,WAIT,,,,,, Thu Apr 04 14:30:52 2019 MANAGEMENT: >STATE:1554384652,AUTH,,,,,, Thu Apr 04 14:30:52 2019 TLS: Initial packet from [AF_INET]188.39.27.194:443, sid=9a289d13 b1579c9d Thu Apr 04 14:30:52 2019 VERIFY OK: depth=1, C=uk, L=Cardiff, O=TrakCel Limited , CN=TrakCel Limited VPN CA, emailAddress=it-operations@trakcel.com Thu Apr 04 14:30:52 2019 VERIFY X509NAME OK: C=uk, L=Cardiff, O=TrakCel Limited , CN=sophos1.trakcel.com, emailAddress=mehedi.hassan@trakcel.com Thu Apr 04 14:30:52 2019 VERIFY OK: depth=0, C=uk, L=Cardiff, O=TrakCel Limited , CN=sophos1.trakcel.com, emailAddress=mehedi.hassan@trakcel.com Thu Apr 04 14:30:53 2019 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu Apr 04 14:30:53 2019 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Apr 04 14:30:53 2019 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu Apr 04 14:30:53 2019 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Apr 04 14:30:53 2019 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu Apr 04 14:30:53 2019 [sophos1.trakcel.com] Peer Connection Initiated with [AF_INET]188.39.27.194:443 Thu Apr 04 14:30:54 2019 MANAGEMENT: >STATE:1554384654,GET_CONFIG,,,,,, Thu Apr 04 14:30:55 2019 SENT CONTROL [sophos1.trakcel.com]: 'PUSH_REQUEST' (status=1) Thu Apr 04 14:30:55 2019 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.10.36.1,route-gateway 10.10.36.1,topology subnet,ping 10,ping-restart 120,redirect-gateway def1,dhcp-option DNS 10.10.10.0,dhcp-option DNS 10.0.100.1,dhcp-option WINS 10.0.100.16,dhcp-option WINS 10.0.100.216,dhcp-option DOMAIN trakcel.com,ifconfig 10.10.36.11 255.255.255.0' Thu Apr 04 14:30:55 2019 OPTIONS IMPORT: timers and/or timeouts modified Thu Apr 04 14:30:55 2019 OPTIONS IMPORT: --ifconfig/up options modified Thu Apr 04 14:30:55 2019 OPTIONS IMPORT: route options modified Thu Apr 04 14:30:55 2019 OPTIONS IMPORT: route-related options modified Thu Apr 04 14:30:55 2019 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Thu Apr 04 14:30:55 2019 Preserving previous TUN/TAP instance: Ethernet 2 Thu Apr 04 14:30:55 2019 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Thu Apr 04 14:30:55 2019 C:\WINDOWS\system32oute.exe DELETE 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:30:55 2019 Route deletion via service succeeded Thu Apr 04 14:30:55 2019 C:\WINDOWS\system32oute.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:30:55 2019 Route deletion via service succeeded Thu Apr 04 14:30:55 2019 C:\WINDOWS\system32oute.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:30:55 2019 Route deletion via service succeeded Thu Apr 04 14:30:55 2019 Closing TUN/TAP interface Thu Apr 04 14:30:56 2019 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=16 HWADDR=d0:53:49:8b:fa:10 Thu Apr 04 14:30:56 2019 open_tun, tt->ipv6=0 Thu Apr 04 14:30:56 2019 TAP-WIN32 device [Ethernet 2] opened: \.\Global\{1AB596FF-E72F-4EA9-AF32-6A508A7A4A17}.tap Thu Apr 04 14:30:56 2019 TAP-Windows Driver Version 9.21 Thu Apr 04 14:30:56 2019 Set TAP-Windows TUN subnet mode network/local/netmask = 10.10.36.0/10.10.36.11/255.255.255.0 [SUCCEEDED] Thu Apr 04 14:30:56 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.36.11/255.255.255.0 on interface {1AB596FF-E72F-4EA9-AF32-6A508A7A4A17} [DHCP-serv: 10.10.36.254, lease-time: 31536000] Thu Apr 04 14:30:56 2019 Successful ARP Flush on interface [7] {1AB596FF-E72F-4EA9-AF32-6A508A7A4A17} Thu Apr 04 14:30:56 2019 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu Apr 04 14:30:56 2019 MANAGEMENT: >STATE:1554384656,ASSIGN_IP,,10.10.36.11,,,, Thu Apr 04 14:31:00 2019 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Thu Apr 04 14:31:00 2019 C:\WINDOWS\system32oute.exe ADD 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:31:00 2019 Route addition via service succeeded Thu Apr 04 14:31:00 2019 C:\WINDOWS\system32oute.exe ADD 0.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:31:00 2019 Route addition via service succeeded Thu Apr 04 14:31:00 2019 C:\WINDOWS\system32oute.exe ADD 128.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:31:00 2019 Route addition via service succeeded Thu Apr 04 14:31:00 2019 MANAGEMENT: >STATE:1554384660,ADD_ROUTES,,,,,, Thu Apr 04 14:31:00 2019 C:\WINDOWS\system32oute.exe ADD 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:31:00 2019 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=16] Thu Apr 04 14:31:00 2019 Route addition via service failed Thu Apr 04 14:31:00 2019 Initialization Sequence Completed Thu Apr 04 14:31:00 2019 MANAGEMENT: >STATE:1554384660,CONNECTED,SUCCESS,10.10.36.11,188.39.27.194,443,, Thu Apr 04 14:33:33 2019 [sophos1.trakcel.com] Inactivity timeout (--ping-restart), restarting Thu Apr 04 14:33:33 2019 SIGUSR1[soft,ping-restart] received, process restarting Thu Apr 04 14:33:33 2019 MANAGEMENT: >STATE:1554384813,RECONNECTING,ping-restart,,,,, Thu Apr 04 14:33:33 2019 Restart pause, 2 second(s) Thu Apr 04 14:33:35 2019 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu Apr 04 14:33:35 2019 MANAGEMENT: >STATE:1554384815,RESOLVE,,,,,, Thu Apr 04 14:33:47 2019 UDPv4 link local: [undef] Thu Apr 04 14:33:47 2019 UDPv4 link remote: [AF_INET]188.39.27.194:443 Thu Apr 04 14:33:47 2019 MANAGEMENT: >STATE:1554384827,WAIT,,,,,, Thu Apr 04 14:33:47 2019 MANAGEMENT: >STATE:1554384827,AUTH,,,,,, Thu Apr 04 14:33:47 2019 TLS: Initial packet from [AF_INET]188.39.27.194:443, sid=e9535db9 2acb050e Thu Apr 04 14:33:47 2019 VERIFY OK: depth=1, C=uk, L=Cardiff, O=TrakCel Limited , CN=TrakCel Limited VPN CA, emailAddress=it-operations@trakcel.com Thu Apr 04 14:33:47 2019 VERIFY X509NAME OK: C=uk, L=Cardiff, O=TrakCel Limited , CN=sophos1.trakcel.com, emailAddress=mehedi.hassan@trakcel.com Thu Apr 04 14:33:47 2019 VERIFY OK: depth=0, C=uk, L=Cardiff, O=TrakCel Limited , CN=sophos1.trakcel.com, emailAddress=mehedi.hassan@trakcel.com Thu Apr 04 14:33:47 2019 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu Apr 04 14:33:47 2019 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Apr 04 14:33:47 2019 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu Apr 04 14:33:47 2019 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Thu Apr 04 14:33:47 2019 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu Apr 04 14:33:47 2019 [sophos1.trakcel.com] Peer Connection Initiated with [AF_INET]188.39.27.194:443 Thu Apr 04 14:33:48 2019 MANAGEMENT: >STATE:1554384828,GET_CONFIG,,,,,, Thu Apr 04 14:33:49 2019 SENT CONTROL [sophos1.trakcel.com]: 'PUSH_REQUEST' (status=1) Thu Apr 04 14:33:49 2019 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.10.36.1,route-gateway 10.10.36.1,topology subnet,ping 10,ping-restart 120,redirect-gateway def1,dhcp-option DNS 10.10.10.0,dhcp-option DNS 10.0.100.1,dhcp-option WINS 10.0.100.16,dhcp-option WINS 10.0.100.216,dhcp-option DOMAIN trakcel.com,ifconfig 10.10.36.6 255.255.255.0' Thu Apr 04 14:33:49 2019 OPTIONS IMPORT: timers and/or timeouts modified Thu Apr 04 14:33:49 2019 OPTIONS IMPORT: --ifconfig/up options modified Thu Apr 04 14:33:49 2019 OPTIONS IMPORT: route options modified Thu Apr 04 14:33:49 2019 OPTIONS IMPORT: route-related options modified Thu Apr 04 14:33:49 2019 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Thu Apr 04 14:33:49 2019 Preserving previous TUN/TAP instance: Ethernet 2 Thu Apr 04 14:33:49 2019 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Thu Apr 04 14:33:49 2019 C:\WINDOWS\system32oute.exe DELETE 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:33:49 2019 Route deletion via service succeeded Thu Apr 04 14:33:49 2019 C:\WINDOWS\system32oute.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:33:49 2019 Route deletion via service succeeded Thu Apr 04 14:33:49 2019 C:\WINDOWS\system32oute.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:33:49 2019 Route deletion via service succeeded Thu Apr 04 14:33:49 2019 Closing TUN/TAP interface Thu Apr 04 14:33:50 2019 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=16 HWADDR=d0:53:49:8b:fa:10 Thu Apr 04 14:33:50 2019 open_tun, tt->ipv6=0 Thu Apr 04 14:33:50 2019 TAP-WIN32 device [Ethernet 2] opened: \.\Global\{1AB596FF-E72F-4EA9-AF32-6A508A7A4A17}.tap Thu Apr 04 14:33:50 2019 TAP-Windows Driver Version 9.21 Thu Apr 04 14:33:50 2019 Set TAP-Windows TUN subnet mode network/local/netmask = 10.10.36.0/10.10.36.6/255.255.255.0 [SUCCEEDED] Thu Apr 04 14:33:50 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.36.6/255.255.255.0 on interface {1AB596FF-E72F-4EA9-AF32-6A508A7A4A17} [DHCP-serv: 10.10.36.254, lease-time: 31536000] Thu Apr 04 14:33:50 2019 Successful ARP Flush on interface [7] {1AB596FF-E72F-4EA9-AF32-6A508A7A4A17} Thu Apr 04 14:33:50 2019 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu Apr 04 14:33:50 2019 MANAGEMENT: >STATE:1554384830,ASSIGN_IP,,10.10.36.6,,,, Thu Apr 04 14:33:54 2019 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up Thu Apr 04 14:33:54 2019 C:\WINDOWS\system32oute.exe ADD 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:33:54 2019 Route addition via service succeeded Thu Apr 04 14:33:54 2019 C:\WINDOWS\system32oute.exe ADD 0.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:33:54 2019 Route addition via service succeeded Thu Apr 04 14:33:54 2019 C:\WINDOWS\system32oute.exe ADD 128.0.0.0 MASK 128.0.0.0 10.10.36.1 Thu Apr 04 14:33:54 2019 Route addition via service succeeded Thu Apr 04 14:33:54 2019 MANAGEMENT: >STATE:1554384834,ADD_ROUTES,,,,,, Thu Apr 04 14:33:54 2019 C:\WINDOWS\system32oute.exe ADD 188.39.27.194 MASK 255.255.255.255 192.168.1.1 Thu Apr 04 14:33:54 2019 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=16] Thu Apr 04 14:33:54 2019 Route addition via service failed Thu Apr 04 14:33:54 2019 Initialization Sequence Completed Thu Apr 04 14:33:54 2019 MANAGEMENT: >STATE:1554384834,CONNECTED,SUCCESS,10.10.36.6,188.39.27.194,443,, Thu Apr 04 14:36:26 2019 [sophos1.trakcel.com] Inactivity timeout (--ping-restart), restarting Thu Apr 04 14:36:26 2019 SIGUSR1[soft,ping-restart] received, process restarting Thu Apr 04 14:36:26 2019 MANAGEMENT: >STATE:1554384986,RECONNECTING,ping-restart,,,,, Thu Apr 04 14:36:26 2019 Restart pause, 2 second(s) Thu Apr 04 14:36:28 2019 MANAGEMENT: Client disconnected Thu Apr 04 14:36:28 2019 Assertion failed at misc.c:779 Thu Apr 04 14:36:28 2019 Exiting due to fatal error 
 Any ideas as to the cause/solution? 
 Many thanks

Aditya Patel · Answer

Hello Daniel Brown2 , 
 The connection logs look good besides the last few entries. While the system is connected via SSL VPN, were you able to ping to any website or the remote location? 
 Could you also check if there is any local security solution or extensions used in the browsers that could prevent the pages to load?

Aditya Patel · Answer

Hello Daniel Brown2 , 
 Hmm, usually the traffc is encrypted so is the DNS request. Could you change the port number of SSL VPN to TCP 8443 or any other port and check if that would improve? If so you may contact your ISP for the reason for a poor perforamnce through their network.