Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 28 subscribers
  • Views 4667 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Loss of SSL VPN access after update to SFOS 17.5.8 MR-8

Alex Lionakis

I applied a firmware update from SFOS 17.5.7 MR-7 to SFOS 17.5.8 MR-8. The firmware update completed successfully. However, once the firewall was back online, all SSL VPN user credentials were no longer valid. When attempting to connect with the Sophos SSL VPN Client users received the message:

"ReConnecting to [user_name]_ssl_vpn_config has failed"

I rolled back the firmware to SFOS 17.5.7 MR-7 but the SSL VPN user credentials still did not work. As a side note, I have performed three firmware updates on this firewall since we purchased it and I have never had this problem.

Is this a known issue with SFOS 17.5.8 MR-8?

When can I safely apply this firmware update? 



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Alex Lionakis

    Hi Alex,



    I had a similar problem with VPN SSL. In my case existed a MAC Address on User, how explained in KB 123042.


    Verify if there is a MAC Address in your User, if yes delete and test again.

  • 0 in reply to Rogério Souza

    Rogerio,

    Thank you for the suggestion. However, I have confirmed that MAC Address Binding was not enabled for any of the SSL VPN users when the problem occurred. Therefore, my conclusion is that MAC Address Binding was not the cause of this problem.

    Thanks!

  • +1 in reply to Alex Lionakis

    This issue has been resolved. Sophos support attempted to recreate the error that I encountered in a test environment and they were not able to. Their conclusion was that this was an intermittent error that caused the database to become corrupted. With the assistance of Sophos support I was able to successfully upgrade to 17.5.8 MR-8 without any further issues. SSL VPN is functioning property.

    It is worth pointing out the importance of downloading a backup of the firewall settings prior to a firmware upgrade. Typically, the upgrade process works without issue but there is always the possibility that something will go wrong during the process. Having a backup to restore makes life much easier in these cases.