Replacement Firewall, new VPN installs do not connect

Did you restore your Backup before or after the registration?

As Lucar suggested, if you uploaded the configuration, CA and all certificates are also restored so VPN users, for example, can connect.

For new users, did you put the users in the SSL VPN configuration?

Do you see the user's certificate under Certificates > Certificate menu?

Thanks

I restored a backup of the old XG and everything was working fine running unregistered. When I registered the device, I changed the registration to a different mySophos account. That's when I noticed that new VPN installs do not connect (though already installed clients do).

I can see user certificiates under Certificates -> Certificates.

Try to restore the Backup again.

If you skip the registration and restore the configuration, XG will not process the VPN Configuration.

The registration is needed for the VPN Certificates. 

Therefore your Configs are not correct imported. 

A Restore with the same backup after the registration should work. 

Thanks for the feedback.

Is the user an existing user or a new created one on the XG?

Logs from remote vpn client and from XG side?

Thanks

Existing user.

I tried experimenting with my own account. My VPN client was working. I uninstalled and reinstalled with a fresh download of the client. Now it does not connect.

When I restored from backup, it restored all certs and ran with registration (person)@(domain). Everything was working.

Now that I have changed registration to (group)@(domain), new VPN installs do not work. I am guessing it is a certificate issue?

Can you try what suggested by Lucar?

The backup I restored from is more than two weeks old at this point. I would much prefer not to restore it as I would lose changes I have made since then.

Sadly the registration process regenerates the XG's certificate chain (I've had this one crop up before), the only way to fix this if you don't want to restore is to just people to download and reinstall the SSL Client.

Regards

I was thinking to suggest to create a new vpn user and check if the VPN works.

If the CA is re-generated, no other change to download the SSL VPN config and start over.

:-(