DEAR FRIENDS
SSL VPN DISCONNECTING FREQUENTLY with 2mins after connecting. pls help me to sort out this problem.am using xg135 running in latest frim ware SFOS 18.0.5 MR-5-Build586
This thread was automatically locked due to age.
DEAR FRIENDS
SSL VPN DISCONNECTING FREQUENTLY with 2mins after connecting. pls help me to sort out this problem.am using xg135 running in latest frim ware SFOS 18.0.5 MR-5-Build586
Hi oriens global,
Thank you for reaching out to Sophos Community.
Request to share SSL VPN client logs of the time of disconnection. ===> Right-click on SSL VPN client logo > View Log
Also, please share a snapshot of 'Cryptographic settings' from SSL VPN settings.
i have attached my cryptographic settings
Thu May 27 09:54:21 2021 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Jul 3 2017 Thu May 27 09:54:21 2021 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.09 Enter Management Password: Thu May 27 09:54:21 2021 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341 Thu May 27 09:54:21 2021 Need hold release from management interface, waiting... Thu May 27 09:54:21 2021 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341 Thu May 27 09:54:21 2021 MANAGEMENT: CMD 'state on' Thu May 27 09:54:21 2021 MANAGEMENT: CMD 'log all on' Thu May 27 09:54:21 2021 MANAGEMENT: CMD 'hold off' Thu May 27 09:54:21 2021 MANAGEMENT: CMD 'hold release' Thu May 27 09:54:31 2021 MANAGEMENT: CMD 'username "Auth" "sysadmin"' Thu May 27 09:54:31 2021 MANAGEMENT: CMD 'password [...]' Thu May 27 09:54:32 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 09:54:32 2021 Attempting to establish TCP connection with [AF_INET]10.11.29.180:8443 [nonblock] Thu May 27 09:54:32 2021 MANAGEMENT: >STATE:1622089472,TCP_CONNECT,,,,,, Thu May 27 09:54:42 2021 TCP: connect to [AF_INET]10.11.29.180:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 09:54:42 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 09:54:42 2021 MANAGEMENT: >STATE:1622089482,RECONNECTING,init_instance,,,,, Thu May 27 09:54:42 2021 Restart pause, 5 second(s) Thu May 27 09:54:47 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 09:54:47 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 09:54:47 2021 MANAGEMENT: >STATE:1622089487,TCP_CONNECT,,,,,, Thu May 27 09:54:48 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 09:54:48 2021 TCPv4_CLIENT link local: [undef] Thu May 27 09:54:48 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 09:54:48 2021 MANAGEMENT: >STATE:1622089488,WAIT,,,,,, Thu May 27 09:54:48 2021 MANAGEMENT: >STATE:1622089488,AUTH,,,,,, Thu May 27 09:54:48 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=1c7d0379 96997ffb Thu May 27 09:54:48 2021 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Thu May 27 09:54:49 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 09:54:49 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 09:54:49 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 09:54:49 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 09:54:49 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 09:54:49 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 09:54:49 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 09:54:49 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 09:54:49 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 09:54:51 2021 MANAGEMENT: >STATE:1622089491,GET_CONFIG,,,,,, Thu May 27 09:54:52 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 09:54:52 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.12 255.255.255.0' Thu May 27 09:54:52 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 09:54:52 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 09:54:52 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 09:54:52 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 09:54:52 2021 OPTIONS IMPORT: route options modified Thu May 27 09:54:52 2021 OPTIONS IMPORT: route-related options modified Thu May 27 09:54:52 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=13 HWADDR=34:e6:ad:4e:95:a8 Thu May 27 09:54:52 2021 open_tun, tt->ipv6=0 Thu May 27 09:54:52 2021 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{59F8FC3F-8AD0-42AA-94DE-002C0A5F93EE}.tap Thu May 27 09:54:52 2021 TAP-Windows Driver Version 9.21 Thu May 27 09:54:52 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.12/255.255.255.0 [SUCCEEDED] Thu May 27 09:54:52 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.12/255.255.255.0 on interface {59F8FC3F-8AD0-42AA-94DE-002C0A5F93EE} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 09:54:52 2021 Successful ARP Flush on interface [10] {59F8FC3F-8AD0-42AA-94DE-002C0A5F93EE} Thu May 27 09:54:52 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 09:54:52 2021 MANAGEMENT: >STATE:1622089492,ASSIGN_IP,,10.81.234.12,,,, Thu May 27 09:54:56 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 09:54:56 2021 MANAGEMENT: >STATE:1622089496,ADD_ROUTES,,,,,, Thu May 27 09:54:56 2021 C:\Windows\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 09:54:56 2021 Route addition via service succeeded Thu May 27 09:54:56 2021 C:\Windows\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 09:54:56 2021 Route addition via service succeeded Thu May 27 09:54:56 2021 C:\Windows\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 09:54:56 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=13] Thu May 27 09:54:56 2021 Route addition via service failed Thu May 27 09:54:56 2021 Initialization Sequence Completed Thu May 27 09:54:56 2021 MANAGEMENT: >STATE:1622089496,CONNECTED,SUCCESS,10.81.234.12,x.x.x.x,8443,192.168.1.9,63769 Thu May 27 10:05:40 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 10:05:40 2021 Connection reset, restarting [-1] Thu May 27 10:05:40 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 10:05:40 2021 MANAGEMENT: >STATE:1622090140,RECONNECTING,connection-reset,,,,, Thu May 27 10:05:40 2021 Restart pause, 5 second(s) Thu May 27 10:05:45 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:05:45 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:05:45 2021 MANAGEMENT: >STATE:1622090145,TCP_CONNECT,,,,,, Thu May 27 10:05:46 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:05:46 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:05:46 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:05:46 2021 MANAGEMENT: >STATE:1622090146,WAIT,,,,,, Thu May 27 10:05:46 2021 MANAGEMENT: >STATE:1622090146,AUTH,,,,,, Thu May 27 10:05:46 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=711f128f ba27d5d7 Thu May 27 10:06:06 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 10:06:06 2021 Connection reset, restarting [-1] Thu May 27 10:06:06 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 10:06:06 2021 MANAGEMENT: >STATE:1622090166,RECONNECTING,connection-reset,,,,, Thu May 27 10:06:06 2021 Restart pause, 5 second(s) Thu May 27 10:06:11 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:06:11 2021 Attempting to establish TCP connection with [AF_INET]192.168.0.150:8443 [nonblock] Thu May 27 10:06:11 2021 MANAGEMENT: >STATE:1622090171,TCP_CONNECT,,,,,, Thu May 27 10:06:21 2021 TCP: connect to [AF_INET]192.168.0.150:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:06:21 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:06:21 2021 MANAGEMENT: >STATE:1622090181,RECONNECTING,init_instance,,,,, Thu May 27 10:06:21 2021 Restart pause, 5 second(s) Thu May 27 10:06:26 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:06:26 2021 Attempting to establish TCP connection with [AF_INET]192.168.1.150:8443 [nonblock] Thu May 27 10:06:26 2021 MANAGEMENT: >STATE:1622090186,TCP_CONNECT,,,,,, Thu May 27 10:06:36 2021 TCP: connect to [AF_INET]192.168.1.150:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:06:36 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:06:36 2021 MANAGEMENT: >STATE:1622090196,RECONNECTING,init_instance,,,,, Thu May 27 10:06:36 2021 Restart pause, 5 second(s) Thu May 27 10:06:41 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:06:41 2021 Attempting to establish TCP connection with [AF_INET]10.255.0.1:8443 [nonblock] Thu May 27 10:06:41 2021 MANAGEMENT: >STATE:1622090201,TCP_CONNECT,,,,,, Thu May 27 10:06:51 2021 TCP: connect to [AF_INET]10.255.0.1:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:06:51 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:06:51 2021 MANAGEMENT: >STATE:1622090211,RECONNECTING,init_instance,,,,, Thu May 27 10:06:51 2021 Restart pause, 5 second(s) Thu May 27 10:06:56 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:06:56 2021 Attempting to establish TCP connection with [AF_INET]10.11.29.180:8443 [nonblock] Thu May 27 10:06:56 2021 MANAGEMENT: >STATE:1622090216,TCP_CONNECT,,,,,, Thu May 27 10:07:06 2021 TCP: connect to [AF_INET]10.11.29.180:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:07:06 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:07:06 2021 MANAGEMENT: >STATE:1622090226,RECONNECTING,init_instance,,,,, Thu May 27 10:07:06 2021 Restart pause, 5 second(s) Thu May 27 10:07:11 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:11 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:07:11 2021 MANAGEMENT: >STATE:1622090231,TCP_CONNECT,,,,,, Thu May 27 10:07:12 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:07:12 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:07:12 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:07:12 2021 MANAGEMENT: >STATE:1622090232,WAIT,,,,,, Thu May 27 10:07:12 2021 MANAGEMENT: >STATE:1622090232,AUTH,,,,,, Thu May 27 10:07:12 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=3aadb3cc 32e96284 Thu May 27 10:07:13 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:13 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:13 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:13 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:07:13 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:07:13 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:07:13 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:07:13 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 10:07:13 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 10:07:14 2021 MANAGEMENT: >STATE:1622090234,GET_CONFIG,,,,,, Thu May 27 10:07:15 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 10:07:15 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.29 255.255.255.0' Thu May 27 10:07:15 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 10:07:15 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 10:07:15 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:15 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 10:07:15 2021 OPTIONS IMPORT: route options modified Thu May 27 10:07:15 2021 OPTIONS IMPORT: route-related options modified Thu May 27 10:07:15 2021 Preserving previous TUN/TAP instance: Ethernet 2 Thu May 27 10:07:15 2021 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Thu May 27 10:07:15 2021 C:\Windows\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:07:15 2021 Route deletion via service succeeded Thu May 27 10:07:15 2021 C:\Windows\system32\route.exe DELETE x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:07:15 2021 Route deletion via service succeeded Thu May 27 10:07:15 2021 Closing TUN/TAP interface Thu May 27 10:07:16 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=13 HWADDR=34:e6:ad:4e:95:a8 Thu May 27 10:07:16 2021 open_tun, tt->ipv6=0 Thu May 27 10:07:16 2021 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{59F8FC3F-8AD0-42AA-94DE-002C0A5F93EE}.tap Thu May 27 10:07:16 2021 TAP-Windows Driver Version 9.21 Thu May 27 10:07:16 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.29/255.255.255.0 [SUCCEEDED] Thu May 27 10:07:16 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.29/255.255.255.0 on interface {59F8FC3F-8AD0-42AA-94DE-002C0A5F93EE} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 10:07:16 2021 Successful ARP Flush on interface [10] {59F8FC3F-8AD0-42AA-94DE-002C0A5F93EE} Thu May 27 10:07:16 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 10:07:16 2021 MANAGEMENT: >STATE:1622090236,ASSIGN_IP,,10.81.234.29,,,, Thu May 27 10:07:20 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 10:07:20 2021 MANAGEMENT: >STATE:1622090240,ADD_ROUTES,,,,,, Thu May 27 10:07:20 2021 C:\Windows\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:07:20 2021 Route addition via service succeeded Thu May 27 10:07:20 2021 C:\Windows\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:07:20 2021 Route addition via service succeeded Thu May 27 10:07:20 2021 C:\Windows\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:07:20 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=13] Thu May 27 10:07:20 2021 Route addition via service failed Thu May 27 10:07:20 2021 Initialization Sequence Completed Thu May 27 10:07:20 2021 MANAGEMENT: >STATE:1622090240,CONNECTED,SUCCESS,10.81.234.29,x.x.x.x,8443,192.168.1.9,50658
Thu May 27 10:00:17 2021 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Jul 3 2017 Thu May 27 10:00:17 2021 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.09 Enter Management Password: Thu May 27 10:00:17 2021 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Thu May 27 10:00:17 2021 Need hold release from management interface, waiting... Thu May 27 10:00:18 2021 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'state on' Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'log all on' Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'hold off' Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'hold release' Thu May 27 10:00:48 2021 MANAGEMENT: CMD 'username "Auth" "bala"' Thu May 27 10:00:48 2021 MANAGEMENT: CMD 'password [...]' Thu May 27 10:00:48 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:00:48 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:00:48 2021 MANAGEMENT: >STATE:1622089848,TCP_CONNECT,,,,,, Thu May 27 10:00:49 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:00:49 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:00:49 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:00:49 2021 MANAGEMENT: >STATE:1622089849,WAIT,,,,,, Thu May 27 10:00:49 2021 MANAGEMENT: >STATE:1622089849,AUTH,,,,,, Thu May 27 10:00:49 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=2084651d a0858ddc Thu May 27 10:00:49 2021 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Thu May 27 10:00:50 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:00:50 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:00:50 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:00:50 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:00:50 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:00:50 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:00:50 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:00:50 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 10:00:50 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 10:00:52 2021 MANAGEMENT: >STATE:1622089852,GET_CONFIG,,,,,, Thu May 27 10:00:53 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 10:00:53 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.15 255.255.255.0' Thu May 27 10:00:53 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 10:00:53 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 10:00:53 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:00:53 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 10:00:53 2021 OPTIONS IMPORT: route options modified Thu May 27 10:00:53 2021 OPTIONS IMPORT: route-related options modified Thu May 27 10:00:53 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=2 HWADDR=34:cf:f6:de:b5:2a Thu May 27 10:00:53 2021 open_tun, tt->ipv6=0 Thu May 27 10:00:53 2021 TAP-WIN32 device [Ethernet 5] opened: \\.\Global\{57B12873-C0CA-44EC-9BFD-B91A6623C18C}.tap Thu May 27 10:00:53 2021 TAP-Windows Driver Version 9.21 Thu May 27 10:00:53 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.15/255.255.255.0 [SUCCEEDED] Thu May 27 10:00:53 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.15/255.255.255.0 on interface {57B12873-C0CA-44EC-9BFD-B91A6623C18C} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 10:00:53 2021 Successful ARP Flush on interface [12] {57B12873-C0CA-44EC-9BFD-B91A6623C18C} Thu May 27 10:00:53 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 10:00:53 2021 MANAGEMENT: >STATE:1622089853,ASSIGN_IP,,10.81.234.15,,,, Thu May 27 10:00:57 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 10:00:57 2021 MANAGEMENT: >STATE:1622089857,ADD_ROUTES,,,,,, Thu May 27 10:00:57 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:00:57 2021 Route addition via service succeeded Thu May 27 10:00:57 2021 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:00:57 2021 Route addition via service succeeded Thu May 27 10:00:57 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:00:57 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=2] Thu May 27 10:00:57 2021 Route addition via service failed Thu May 27 10:00:57 2021 Initialization Sequence Completed Thu May 27 10:00:57 2021 MANAGEMENT: >STATE:1622089857,CONNECTED,SUCCESS,10.81.234.15,x.x.x.x,8443,192.168.1.7,64876 Thu May 27 10:07:04 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 10:07:04 2021 Connection reset, restarting [-1] Thu May 27 10:07:04 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 10:07:04 2021 MANAGEMENT: >STATE:1622090224,RECONNECTING,connection-reset,,,,, Thu May 27 10:07:04 2021 Restart pause, 5 second(s) Thu May 27 10:07:09 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:09 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:07:09 2021 MANAGEMENT: >STATE:1622090229,TCP_CONNECT,,,,,, Thu May 27 10:07:10 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:07:10 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:07:10 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:07:10 2021 MANAGEMENT: >STATE:1622090230,WAIT,,,,,, Thu May 27 10:07:10 2021 MANAGEMENT: >STATE:1622090230,AUTH,,,,,, Thu May 27 10:07:10 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=a0197821 895a7060 Thu May 27 10:07:11 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:11 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:11 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:31 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 10:07:31 2021 Connection reset, restarting [-1] Thu May 27 10:07:31 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 10:07:31 2021 MANAGEMENT: >STATE:1622090251,RECONNECTING,connection-reset,,,,, Thu May 27 10:07:31 2021 Restart pause, 5 second(s) Thu May 27 10:07:36 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:36 2021 Attempting to establish TCP connection with [AF_INET]10.11.28.18:8443 [nonblock] Thu May 27 10:07:36 2021 MANAGEMENT: >STATE:1622090256,TCP_CONNECT,,,,,, Thu May 27 10:07:46 2021 TCP: connect to [AF_INET]10.11.28.18:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:07:46 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:07:46 2021 MANAGEMENT: >STATE:1622090266,RECONNECTING,init_instance,,,,, Thu May 27 10:07:46 2021 Restart pause, 5 second(s) Thu May 27 10:07:51 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:51 2021 Attempting to establish TCP connection with [AF_INET]192.168.0.150:8443 [nonblock] Thu May 27 10:07:51 2021 MANAGEMENT: >STATE:1622090271,TCP_CONNECT,,,,,, Thu May 27 10:08:01 2021 TCP: connect to [AF_INET]192.168.0.150:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:08:01 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:08:01 2021 MANAGEMENT: >STATE:1622090281,RECONNECTING,init_instance,,,,, Thu May 27 10:08:01 2021 Restart pause, 5 second(s) Thu May 27 10:08:06 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:08:06 2021 Attempting to establish TCP connection with [AF_INET]10.255.0.1:8443 [nonblock] Thu May 27 10:08:06 2021 MANAGEMENT: >STATE:1622090286,TCP_CONNECT,,,,,, Thu May 27 10:08:16 2021 TCP: connect to [AF_INET]10.255.0.1:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:08:16 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:08:16 2021 MANAGEMENT: >STATE:1622090296,RECONNECTING,init_instance,,,,, Thu May 27 10:08:16 2021 Restart pause, 5 second(s) Thu May 27 10:08:21 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:08:21 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:08:21 2021 MANAGEMENT: >STATE:1622090301,TCP_CONNECT,,,,,, Thu May 27 10:08:22 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:08:22 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:08:22 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:08:22 2021 MANAGEMENT: >STATE:1622090302,WAIT,,,,,, Thu May 27 10:08:23 2021 MANAGEMENT: >STATE:1622090303,AUTH,,,,,, Thu May 27 10:08:23 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=5d4f13e1 cb30fcec Thu May 27 10:08:24 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:08:24 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:08:24 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:08:25 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:08:25 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:08:25 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:08:25 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:08:25 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 10:08:25 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 10:08:26 2021 MANAGEMENT: >STATE:1622090306,GET_CONFIG,,,,,, Thu May 27 10:08:27 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 10:08:27 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.23 255.255.255.0' Thu May 27 10:08:27 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 10:08:27 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 10:08:27 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:08:27 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 10:08:27 2021 OPTIONS IMPORT: route options modified Thu May 27 10:08:27 2021 OPTIONS IMPORT: route-related options modified Thu May 27 10:08:27 2021 Preserving previous TUN/TAP instance: Ethernet 5 Thu May 27 10:08:27 2021 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Thu May 27 10:08:27 2021 C:\WINDOWS\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:08:27 2021 Route deletion via service succeeded Thu May 27 10:08:27 2021 C:\WINDOWS\system32\route.exe DELETE x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:08:27 2021 Route deletion via service succeeded Thu May 27 10:08:27 2021 Closing TUN/TAP interface Thu May 27 10:08:28 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=2 HWADDR=34:cf:f6:de:b5:2a Thu May 27 10:08:28 2021 open_tun, tt->ipv6=0 Thu May 27 10:08:28 2021 TAP-WIN32 device [Ethernet 5] opened: \\.\Global\{57B12873-C0CA-44EC-9BFD-B91A6623C18C}.tap Thu May 27 10:08:28 2021 TAP-Windows Driver Version 9.21 Thu May 27 10:08:28 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.23/255.255.255.0 [SUCCEEDED] Thu May 27 10:08:28 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.23/255.255.255.0 on interface {57B12873-C0CA-44EC-9BFD-B91A6623C18C} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 10:08:28 2021 Successful ARP Flush on interface [12] {57B12873-C0CA-44EC-9BFD-B91A6623C18C} Thu May 27 10:08:28 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 10:08:28 2021 MANAGEMENT: >STATE:1622090308,ASSIGN_IP,,10.81.234.23,,,, Thu May 27 10:08:32 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 10:08:32 2021 MANAGEMENT: >STATE:1622090312,ADD_ROUTES,,,,,, Thu May 27 10:08:32 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:08:32 2021 Route addition via service succeeded Thu May 27 10:08:32 2021 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:08:32 2021 Route addition via service succeeded Thu May 27 10:08:32 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:08:32 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=2] Thu May 27 10:08:32 2021 Route addition via service failed Thu May 27 10:08:32 2021 Initialization Sequence Completed Thu May 27 10:08:32 2021 MANAGEMENT: >STATE:1622090312,CONNECTED,SUCCESS,10.81.234.23,x.x.x.x,8443,192.168.1.7,51052
user reconnected within 9 mins
those who are connected 9:56AM vpn again reconnected 10:03am
Time | Log comp | Status | Username | Src IP | Auth client |
27-05-2021 10:03 | Firewall Authentication | Successful | jayashree | 10.81.234.24 | SSLVPN |
27-05-2021 09:56 | Firewall Authentication | Successful | jayashree | 10.81.234.16 | SSLVPN |
Time | Log comp | Status | Username | Src IP | Auth client |
27-05-2021 10:17 | Firewall Authentication | Successful | lavanya | 10.81.234.7 | SSLVPN |
27-05-2021 10:07 | Firewall Authentication | Successful | lavanya | 10.81.234.32 |
SSLVPN |
if user are not using means, idle timeout is 15mins but its reconnecting in 10mins
Thu May 27 10:00:17 2021 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Jul 3 2017 Thu May 27 10:00:17 2021 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.09 Enter Management Password: Thu May 27 10:00:17 2021 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340 Thu May 27 10:00:17 2021 Need hold release from management interface, waiting... Thu May 27 10:00:18 2021 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340 Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'state on' Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'log all on' Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'hold off' Thu May 27 10:00:18 2021 MANAGEMENT: CMD 'hold release' Thu May 27 10:00:48 2021 MANAGEMENT: CMD 'username "Auth" "bala"' Thu May 27 10:00:48 2021 MANAGEMENT: CMD 'password [...]' Thu May 27 10:00:48 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:00:48 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:00:48 2021 MANAGEMENT: >STATE:1622089848,TCP_CONNECT,,,,,, Thu May 27 10:00:49 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:00:49 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:00:49 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:00:49 2021 MANAGEMENT: >STATE:1622089849,WAIT,,,,,, Thu May 27 10:00:49 2021 MANAGEMENT: >STATE:1622089849,AUTH,,,,,, Thu May 27 10:00:49 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=2084651d a0858ddc Thu May 27 10:00:49 2021 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Thu May 27 10:00:50 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:00:50 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:00:50 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:00:50 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:00:50 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:00:50 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:00:50 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:00:50 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 10:00:50 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 10:00:52 2021 MANAGEMENT: >STATE:1622089852,GET_CONFIG,,,,,, Thu May 27 10:00:53 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 10:00:53 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.15 255.255.255.0' Thu May 27 10:00:53 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 10:00:53 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 10:00:53 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:00:53 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 10:00:53 2021 OPTIONS IMPORT: route options modified Thu May 27 10:00:53 2021 OPTIONS IMPORT: route-related options modified Thu May 27 10:00:53 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=2 HWADDR=34:cf:f6:de:b5:2a Thu May 27 10:00:53 2021 open_tun, tt->ipv6=0 Thu May 27 10:00:53 2021 TAP-WIN32 device [Ethernet 5] opened: \\.\Global\{57B12873-C0CA-44EC-9BFD-B91A6623C18C}.tap Thu May 27 10:00:53 2021 TAP-Windows Driver Version 9.21 Thu May 27 10:00:53 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.15/255.255.255.0 [SUCCEEDED] Thu May 27 10:00:53 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.15/255.255.255.0 on interface {57B12873-C0CA-44EC-9BFD-B91A6623C18C} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 10:00:53 2021 Successful ARP Flush on interface [12] {57B12873-C0CA-44EC-9BFD-B91A6623C18C} Thu May 27 10:00:53 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 10:00:53 2021 MANAGEMENT: >STATE:1622089853,ASSIGN_IP,,10.81.234.15,,,, Thu May 27 10:00:57 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 10:00:57 2021 MANAGEMENT: >STATE:1622089857,ADD_ROUTES,,,,,, Thu May 27 10:00:57 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:00:57 2021 Route addition via service succeeded Thu May 27 10:00:57 2021 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:00:57 2021 Route addition via service succeeded Thu May 27 10:00:57 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:00:57 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=2] Thu May 27 10:00:57 2021 Route addition via service failed Thu May 27 10:00:57 2021 Initialization Sequence Completed Thu May 27 10:00:57 2021 MANAGEMENT: >STATE:1622089857,CONNECTED,SUCCESS,10.81.234.15,x.x.x.x,8443,192.168.1.7,64876 Thu May 27 10:07:04 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 10:07:04 2021 Connection reset, restarting [-1] Thu May 27 10:07:04 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 10:07:04 2021 MANAGEMENT: >STATE:1622090224,RECONNECTING,connection-reset,,,,, Thu May 27 10:07:04 2021 Restart pause, 5 second(s) Thu May 27 10:07:09 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:09 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:07:09 2021 MANAGEMENT: >STATE:1622090229,TCP_CONNECT,,,,,, Thu May 27 10:07:10 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:07:10 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:07:10 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:07:10 2021 MANAGEMENT: >STATE:1622090230,WAIT,,,,,, Thu May 27 10:07:10 2021 MANAGEMENT: >STATE:1622090230,AUTH,,,,,, Thu May 27 10:07:10 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=a0197821 895a7060 Thu May 27 10:07:11 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:11 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:11 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:07:31 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 10:07:31 2021 Connection reset, restarting [-1] Thu May 27 10:07:31 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 10:07:31 2021 MANAGEMENT: >STATE:1622090251,RECONNECTING,connection-reset,,,,, Thu May 27 10:07:31 2021 Restart pause, 5 second(s) Thu May 27 10:07:36 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:36 2021 Attempting to establish TCP connection with [AF_INET]10.11.28.18:8443 [nonblock] Thu May 27 10:07:36 2021 MANAGEMENT: >STATE:1622090256,TCP_CONNECT,,,,,, Thu May 27 10:07:46 2021 TCP: connect to [AF_INET]10.11.28.18:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:07:46 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:07:46 2021 MANAGEMENT: >STATE:1622090266,RECONNECTING,init_instance,,,,, Thu May 27 10:07:46 2021 Restart pause, 5 second(s) Thu May 27 10:07:51 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:07:51 2021 Attempting to establish TCP connection with [AF_INET]192.168.0.150:8443 [nonblock] Thu May 27 10:07:51 2021 MANAGEMENT: >STATE:1622090271,TCP_CONNECT,,,,,, Thu May 27 10:08:01 2021 TCP: connect to [AF_INET]192.168.0.150:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:08:01 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:08:01 2021 MANAGEMENT: >STATE:1622090281,RECONNECTING,init_instance,,,,, Thu May 27 10:08:01 2021 Restart pause, 5 second(s) Thu May 27 10:08:06 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:08:06 2021 Attempting to establish TCP connection with [AF_INET]10.255.0.1:8443 [nonblock] Thu May 27 10:08:06 2021 MANAGEMENT: >STATE:1622090286,TCP_CONNECT,,,,,, Thu May 27 10:08:16 2021 TCP: connect to [AF_INET]10.255.0.1:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive. Thu May 27 10:08:16 2021 SIGUSR1[soft,init_instance] received, process restarting Thu May 27 10:08:16 2021 MANAGEMENT: >STATE:1622090296,RECONNECTING,init_instance,,,,, Thu May 27 10:08:16 2021 Restart pause, 5 second(s) Thu May 27 10:08:21 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:08:21 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 10:08:21 2021 MANAGEMENT: >STATE:1622090301,TCP_CONNECT,,,,,, Thu May 27 10:08:22 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 10:08:22 2021 TCPv4_CLIENT link local: [undef] Thu May 27 10:08:22 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 10:08:22 2021 MANAGEMENT: >STATE:1622090302,WAIT,,,,,, Thu May 27 10:08:23 2021 MANAGEMENT: >STATE:1622090303,AUTH,,,,,, Thu May 27 10:08:23 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=5d4f13e1 cb30fcec Thu May 27 10:08:24 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:08:24 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:08:24 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 10:08:25 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:08:25 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:08:25 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 10:08:25 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 10:08:25 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 10:08:25 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 10:08:26 2021 MANAGEMENT: >STATE:1622090306,GET_CONFIG,,,,,, Thu May 27 10:08:27 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 10:08:27 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.23 255.255.255.0' Thu May 27 10:08:27 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 10:08:27 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 10:08:27 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 10:08:27 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 10:08:27 2021 OPTIONS IMPORT: route options modified Thu May 27 10:08:27 2021 OPTIONS IMPORT: route-related options modified Thu May 27 10:08:27 2021 Preserving previous TUN/TAP instance: Ethernet 5 Thu May 27 10:08:27 2021 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Thu May 27 10:08:27 2021 C:\WINDOWS\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:08:27 2021 Route deletion via service succeeded Thu May 27 10:08:27 2021 C:\WINDOWS\system32\route.exe DELETE x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:08:27 2021 Route deletion via service succeeded Thu May 27 10:08:27 2021 Closing TUN/TAP interface Thu May 27 10:08:28 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=2 HWADDR=34:cf:f6:de:b5:2a Thu May 27 10:08:28 2021 open_tun, tt->ipv6=0 Thu May 27 10:08:28 2021 TAP-WIN32 device [Ethernet 5] opened: \\.\Global\{57B12873-C0CA-44EC-9BFD-B91A6623C18C}.tap Thu May 27 10:08:28 2021 TAP-Windows Driver Version 9.21 Thu May 27 10:08:28 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.23/255.255.255.0 [SUCCEEDED] Thu May 27 10:08:28 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.23/255.255.255.0 on interface {57B12873-C0CA-44EC-9BFD-B91A6623C18C} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 10:08:28 2021 Successful ARP Flush on interface [12] {57B12873-C0CA-44EC-9BFD-B91A6623C18C} Thu May 27 10:08:28 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 10:08:28 2021 MANAGEMENT: >STATE:1622090308,ASSIGN_IP,,10.81.234.23,,,, Thu May 27 10:08:32 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 10:08:32 2021 MANAGEMENT: >STATE:1622090312,ADD_ROUTES,,,,,, Thu May 27 10:08:32 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:08:32 2021 Route addition via service succeeded Thu May 27 10:08:32 2021 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 10:08:32 2021 Route addition via service succeeded Thu May 27 10:08:32 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 10:08:32 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=2] Thu May 27 10:08:32 2021 Route addition via service failed Thu May 27 10:08:32 2021 Initialization Sequence Completed Thu May 27 10:08:32 2021 MANAGEMENT: >STATE:1622090312,CONNECTED,SUCCESS,10.81.234.23,x.x.x.x,8443,192.168.1.7,51052 Thu May 27 11:02:40 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 11:02:40 2021 Connection reset, restarting [-1] Thu May 27 11:02:40 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 11:02:40 2021 MANAGEMENT: >STATE:1622093560,RECONNECTING,connection-reset,,,,, Thu May 27 11:02:40 2021 Restart pause, 5 second(s) Thu May 27 11:02:45 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 11:02:45 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 11:02:45 2021 MANAGEMENT: >STATE:1622093565,TCP_CONNECT,,,,,, Thu May 27 11:02:46 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 11:02:46 2021 TCPv4_CLIENT link local: [undef] Thu May 27 11:02:46 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 11:02:46 2021 MANAGEMENT: >STATE:1622093566,WAIT,,,,,, Thu May 27 11:02:46 2021 MANAGEMENT: >STATE:1622093566,AUTH,,,,,, Thu May 27 11:02:46 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=42b99071 d666ff73 Thu May 27 11:02:46 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 11:02:46 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 11:02:46 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 11:02:48 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 11:02:48 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 11:02:48 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 11:02:48 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 11:02:48 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 11:02:48 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 11:02:49 2021 MANAGEMENT: >STATE:1622093569,GET_CONFIG,,,,,, Thu May 27 11:02:50 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 11:02:50 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.15 255.255.255.0' Thu May 27 11:02:50 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 11:02:50 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 11:02:50 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 11:02:50 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 11:02:50 2021 OPTIONS IMPORT: route options modified Thu May 27 11:02:50 2021 OPTIONS IMPORT: route-related options modified Thu May 27 11:02:50 2021 Preserving previous TUN/TAP instance: Ethernet 5 Thu May 27 11:02:50 2021 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Thu May 27 11:02:50 2021 C:\WINDOWS\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 11:02:50 2021 Route deletion via service succeeded Thu May 27 11:02:50 2021 C:\WINDOWS\system32\route.exe DELETE x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 11:02:50 2021 Route deletion via service succeeded Thu May 27 11:02:50 2021 Closing TUN/TAP interface Thu May 27 11:02:51 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=2 HWADDR=34:cf:f6:de:b5:2a Thu May 27 11:02:51 2021 open_tun, tt->ipv6=0 Thu May 27 11:02:51 2021 TAP-WIN32 device [Ethernet 5] opened: \\.\Global\{57B12873-C0CA-44EC-9BFD-B91A6623C18C}.tap Thu May 27 11:02:51 2021 TAP-Windows Driver Version 9.21 Thu May 27 11:02:51 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.15/255.255.255.0 [SUCCEEDED] Thu May 27 11:02:51 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.15/255.255.255.0 on interface {57B12873-C0CA-44EC-9BFD-B91A6623C18C} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 11:02:51 2021 Successful ARP Flush on interface [12] {57B12873-C0CA-44EC-9BFD-B91A6623C18C} Thu May 27 11:02:51 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 11:02:51 2021 MANAGEMENT: >STATE:1622093571,ASSIGN_IP,,10.81.234.15,,,, Thu May 27 11:02:55 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 11:02:55 2021 MANAGEMENT: >STATE:1622093575,ADD_ROUTES,,,,,, Thu May 27 11:02:55 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 11:02:55 2021 Route addition via service succeeded Thu May 27 11:02:55 2021 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 11:02:55 2021 Route addition via service succeeded Thu May 27 11:02:55 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 11:02:55 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=2] Thu May 27 11:02:55 2021 Route addition via service failed Thu May 27 11:02:55 2021 Initialization Sequence Completed Thu May 27 11:02:55 2021 MANAGEMENT: >STATE:1622093575,CONNECTED,SUCCESS,10.81.234.15,x.x.x.x,8443,192.168.1.7,49709 Thu May 27 11:03:36 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060) Thu May 27 11:03:36 2021 Connection reset, restarting [-1] Thu May 27 11:03:36 2021 SIGUSR1[soft,connection-reset] received, process restarting Thu May 27 11:03:36 2021 MANAGEMENT: >STATE:1622093616,RECONNECTING,connection-reset,,,,, Thu May 27 11:03:36 2021 Restart pause, 5 second(s) Thu May 27 11:03:41 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 11:03:41 2021 Attempting to establish TCP connection with [AF_INET]x.x.x.x:8443 [nonblock] Thu May 27 11:03:41 2021 MANAGEMENT: >STATE:1622093621,TCP_CONNECT,,,,,, Thu May 27 11:03:42 2021 TCP connection established with [AF_INET]x.x.x.x:8443 Thu May 27 11:03:42 2021 TCPv4_CLIENT link local: [undef] Thu May 27 11:03:42 2021 TCPv4_CLIENT link remote: [AF_INET]x.x.x.x:8443 Thu May 27 11:03:42 2021 MANAGEMENT: >STATE:1622093622,WAIT,,,,,, Thu May 27 11:03:42 2021 MANAGEMENT: >STATE:1622093622,AUTH,,,,,, Thu May 27 11:03:42 2021 TLS: Initial packet from [AF_INET]x.x.x.x:8443, sid=8c34681d 089e9902 Thu May 27 11:03:43 2021 VERIFY OK: depth=1, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=Sophos_CA_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 11:03:43 2021 VERIFY X509NAME OK: C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 11:03:43 2021 VERIFY OK: depth=0, C=IN, ST=Tamilnadu, L=Chennai, O=oriens global marketing private limited, OU=OU, CN=SophosApplianceCertificate_C1B0A69GQFWG8DB, emailAddress=ashok@oriensworld.in Thu May 27 11:03:44 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 11:03:44 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 11:03:44 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key Thu May 27 11:03:44 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication Thu May 27 11:03:44 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA Thu May 27 11:03:44 2021 [SophosApplianceCertificate_C1B0A69GQFWG8DB] Peer Connection Initiated with [AF_INET]x.x.x.x:8443 Thu May 27 11:03:45 2021 MANAGEMENT: >STATE:1622093625,GET_CONFIG,,,,,, Thu May 27 11:03:46 2021 SENT CONTROL [SophosApplianceCertificate_C1B0A69GQFWG8DB]: 'PUSH_REQUEST' (status=1) Thu May 27 11:03:47 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 45,ping-restart 180,route 192.168.0.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 900 7680,ifconfig 10.81.234.14 255.255.255.0' Thu May 27 11:03:47 2021 OPTIONS IMPORT: timers and/or timeouts modified Thu May 27 11:03:47 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified Thu May 27 11:03:47 2021 Socket Buffers: R=[65536->65536] S=[65536->65536] Thu May 27 11:03:47 2021 OPTIONS IMPORT: --ifconfig/up options modified Thu May 27 11:03:47 2021 OPTIONS IMPORT: route options modified Thu May 27 11:03:47 2021 OPTIONS IMPORT: route-related options modified Thu May 27 11:03:47 2021 Preserving previous TUN/TAP instance: Ethernet 5 Thu May 27 11:03:47 2021 NOTE: Pulled options changed on restart, will need to close and reopen TUN/TAP device. Thu May 27 11:03:47 2021 C:\WINDOWS\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 11:03:47 2021 Route deletion via service succeeded Thu May 27 11:03:47 2021 C:\WINDOWS\system32\route.exe DELETE x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 11:03:47 2021 Route deletion via service succeeded Thu May 27 11:03:47 2021 Closing TUN/TAP interface Thu May 27 11:03:48 2021 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 I=2 HWADDR=34:cf:f6:de:b5:2a Thu May 27 11:03:48 2021 open_tun, tt->ipv6=0 Thu May 27 11:03:48 2021 TAP-WIN32 device [Ethernet 5] opened: \\.\Global\{57B12873-C0CA-44EC-9BFD-B91A6623C18C}.tap Thu May 27 11:03:48 2021 TAP-Windows Driver Version 9.21 Thu May 27 11:03:48 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.14/255.255.255.0 [SUCCEEDED] Thu May 27 11:03:48 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.14/255.255.255.0 on interface {57B12873-C0CA-44EC-9BFD-B91A6623C18C} [DHCP-serv: 10.81.234.254, lease-time: 31536000] Thu May 27 11:03:48 2021 Successful ARP Flush on interface [12] {57B12873-C0CA-44EC-9BFD-B91A6623C18C} Thu May 27 11:03:48 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Thu May 27 11:03:48 2021 MANAGEMENT: >STATE:1622093628,ASSIGN_IP,,10.81.234.14,,,, Thu May 27 11:03:52 2021 TEST ROUTES: 3/3 succeeded len=3 ret=1 a=0 u/d=up Thu May 27 11:03:52 2021 MANAGEMENT: >STATE:1622093632,ADD_ROUTES,,,,,, Thu May 27 11:03:52 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 11:03:52 2021 Route addition via service succeeded Thu May 27 11:03:52 2021 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.81.234.5 Thu May 27 11:03:52 2021 Route addition via service succeeded Thu May 27 11:03:52 2021 C:\WINDOWS\system32\route.exe ADD x.x.x.x MASK 255.255.255.255 192.168.1.1 Thu May 27 11:03:52 2021 ROUTE: route addition failed using service: The object already exists. [status=5010 if_index=2] Thu May 27 11:03:52 2021 Route addition via service failed Thu May 27 11:03:52 2021 Initialization Sequence Completed Thu May 27 11:03:52 2021 MANAGEMENT: >STATE:1622093632,CONNECTED,SUCCESS,10.81.234.14,x.x.x.x,8443,192.168.1.7,62330
again user disconnected while working