User Report that they can not access Port 80 when dialling in via SSL-VPn

Hi BerndFeist,

Thank you for reaching out to the Community! 

Check out the following document for packet dropped by rule id 0 and as "invalid traffic": Sophos XG Firewall: Invalid Traffic.

Please take a packet capture on the users' source IP address and share the screenshot with us. 

Check out the following KBA for more info: Sophos XG Firewall: How to monitor traffic using packet capture utility in the GUI.

Thanks,

Hi BerndFeist,

Thank you for reaching out to the Community! 

Check out the following document for packet dropped by rule id 0 and as "invalid traffic": Sophos XG Firewall: Invalid Traffic.

Please take a packet capture on the users' source IP address and share the screenshot with us. 

Check out the following KBA for more info: Sophos XG Firewall: How to monitor traffic using packet capture utility in the GUI.

Thanks,

Thanks. I think the document you mentioned above and the refecenced knowledge base article https://support.sophos.com/support/s/article/KB-000037984?language=en_US explain the issue more or less. Users were also talking about changing some compression settings (don't know where exactly) from comp-lzo no to comp-lzo yes.

Hi BerndFeist,

Thank you for the update! 

You could make this change from the VPN > VPN Settings > SSL VPN > Compression Settings. If you enable this setting, It will compress data sent through SSL VPN tunnels prior to encryption. 

Note: If you make this change, users need a new configuration from the user portal. 

Thanks,