This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 18.0.5 MR-5-Build586 regarding SSL VPN

I have found a new bug in SFOS 18.0.5 MR-5-Build586. The error concerns the VPN configuration.

When adding a new network under VPN/SSL VPN (remote access), the required route is not pushed to the VPN client!
Of course, the VPN connection was re-initiated for testing!

I have found two ways to work around this BUG:

1. restart the firewall ;-(
2. change the global VPN settings.

Both workarounds are not practical, as in both cases all users are of course disconnected.

Tested with two different installations

Let's see what qualified advice Sophos First Level Support will give us this time.

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 4 years ago in reply to Gerd Rehders1 +1 verified

See: Its under known issues.

0 LuCar Toni over 4 years ago

Seems to be not new to me, if it is already included in the known issue list + workaround. https://docs.sophos.com/releasenotes/output/en-us/nsg/sf_180_rn.html
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerd Rehders1 over 4 years ago in reply to LuCar Toni

Hi luCar Toni ;-)

thanks for your reply - but I can´t find this bug in the link you attached.

Anyway, but if it's supposed to be an old bug, that doesn't make it better, does it?

So in the end I don't understand your post.

BR Gerd
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni over 4 years ago in reply to Gerd Rehders1

See:

Its under known issues.
Cancel
Vote Up +1 Vote Down

Cancel
0 Gerd Rehders1 over 4 years ago in reply to LuCar Toni

Hi LuCar Toni,

sorry, you`re right.
This is an very old bug (Published on 23.06.21)
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Gerd Rehders1

Compared to the release date of MR5 (13.05) and the release of this KIL (23.05) this is rather quick response.
Cancel
Vote Up 0 Vote Down

Cancel
0 Bart van der Horst over 4 years ago in reply to LuCar Toni

Hi LuCar Toni where can i find the kil list?
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerd Rehders1 over 4 years ago in reply to Bart van der Horst

Luca is right,

the problem has been known for a long time (about 10 days)!

BUT the work arround that Sophos offers is not working!
I did
rm -rf /tmp/openvpn/conf.d/*
Result:
The connected users seem to stay connected.
BUT all new connections got the message "wrong Username or Credentiels".
But the log on the firewall said (Authentication successfull)

So please don't do this on a production machine like I did!

More than 90 users were having problems until the machine rebooted!

BR Gerd
Cancel
Vote Up 0 Vote Down

Cancel