User Report that they can not access Port 80 when dialling in via SSL-VPn

Hi BerndFeist,

Thank you for reaching out to the Community! 

Check out the following document for packet dropped by rule id 0 and as "invalid traffic": Sophos XG Firewall: Invalid Traffic.

Please take a packet capture on the users' source IP address and share the screenshot with us. 

Check out the following KBA for more info: Sophos XG Firewall: How to monitor traffic using packet capture utility in the GUI.

Thanks,

Thanks. I think the document you mentioned above and the refecenced knowledge base article https://support.sophos.com/support/s/article/KB-000037984?language=en_US explain the issue more or less. Users were also talking about changing some compression settings (don't know where exactly) from comp-lzo no to comp-lzo yes.

Hi BerndFeist,

Thank you for the update! 

You could make this change from the VPN > VPN Settings > SSL VPN > Compression Settings. If you enable this setting, It will compress data sent through SSL VPN tunnels prior to encryption. 

Note: If you make this change, users need a new configuration from the user portal. 

Thanks,

Hi BerndFeist,

Thank you for the update! 

You could make this change from the VPN > VPN Settings > SSL VPN > Compression Settings. If you enable this setting, It will compress data sent through SSL VPN tunnels prior to encryption. 

Note: If you make this change, users need a new configuration from the user portal. 

Thanks,