Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 29 subscribers
  • Views 3185 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

User can't stay connected to SSL VPN

Glen Garner

Hi, we have one user whose SSL VPN connection doesn't work. It will connect and indicate a green traffic light for about 10-20 seconds, but during this time he is unable to access network resources. Then it drops and turns back to a red+yellow light icon. The log we see is below, and it just loops with the last few lines and never successfully maintains a connection. No one else is having this issue.

I've isolated the issue to his computer. He's tried using the VPN on three different networks (his home network, his mobile hotspot, and a public WiFi) with the same result every time. I've tried rebooting, disabling Windows Firewall, running a route table flush and rebooting, flushing DNS... nothing seems to work. And we've uninstalled and reinstalled too many times to count.

Thu Aug 12 09:46:28 2021 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Jul  3 2017
Thu Aug 12 09:46:28 2021 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.09
Enter Management Password:
Thu Aug 12 09:46:28 2021 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Thu Aug 12 09:46:28 2021 Need hold release from management interface, waiting...
Thu Aug 12 09:46:28 2021 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Thu Aug 12 09:46:28 2021 MANAGEMENT: CMD 'state on'
Thu Aug 12 09:46:28 2021 MANAGEMENT: CMD 'log all on'
Thu Aug 12 09:46:28 2021 MANAGEMENT: CMD 'hold off'
Thu Aug 12 09:46:28 2021 MANAGEMENT: CMD 'hold release'
Thu Aug 12 09:46:54 2021 MANAGEMENT: CMD 'username "Auth" "USER_NAME_OBFUSCATED"'
Thu Aug 12 09:46:54 2021 MANAGEMENT: CMD 'password [...]'
Thu Aug 12 09:46:54 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:46:54 2021 Attempting to establish TCP connection with [AF_INET]66.XXX.XXX.XXX:8443 [nonblock]
Thu Aug 12 09:46:54 2021 MANAGEMENT: >STATE:1628783214,TCP_CONNECT,,,,,,
Thu Aug 12 09:46:55 2021 TCP connection established with [AF_INET]66.XXX.XXX.XXX:8443
Thu Aug 12 09:46:55 2021 TCPv4_CLIENT link local: [undef]
Thu Aug 12 09:46:55 2021 TCPv4_CLIENT link remote: [AF_INET]66.XXX.XXX.XXX:8443
Thu Aug 12 09:46:55 2021 MANAGEMENT: >STATE:1628783215,WAIT,,,,,,
Thu Aug 12 09:46:55 2021 MANAGEMENT: >STATE:1628783215,AUTH,,,,,,
Thu Aug 12 09:46:55 2021 TLS: Initial packet from [AF_INET]66.XXX.XXX.XXX:8443, sid=db34c00a 4fdf398d
Thu Aug 12 09:46:55 2021 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu Aug 12 09:46:58 2021 VERIFY OK: depth=1, C=US, ST=ID, L=Idaho Falls, O=Super T Transport, OU=OU, CN=Sophos_CA_C1A1039VM9VXJA9, emailAddress=AUTH@XXXX.COM
Thu Aug 12 09:46:58 2021 VERIFY X509NAME OK: C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_lITbG1UO02HkZYF, emailAddress=na@example.com
Thu Aug 12 09:46:58 2021 VERIFY OK: depth=0, C=NA, ST=NA, L=NA, O=NA, OU=NA, CN=Appliance_Certificate_lITbG1UO02HkZYF, emailAddress=na@example.com
Thu Aug 12 09:47:02 2021 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 12 09:47:02 2021 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Aug 12 09:47:02 2021 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu Aug 12 09:47:02 2021 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Thu Aug 12 09:47:02 2021 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Thu Aug 12 09:47:02 2021 [Appliance_Certificate_lITbG1UO02HkZYF] Peer Connection Initiated with [AF_INET]66.XXX.XXX.XXX:8443
Thu Aug 12 09:47:03 2021 MANAGEMENT: >STATE:1628783223,GET_CONFIG,,,,,,
Thu Aug 12 09:47:04 2021 SENT CONTROL [Appliance_Certificate_lITbG1UO02HkZYF]: 'PUSH_REQUEST' (status=1)
Thu Aug 12 09:47:05 2021 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 450,ping-restart 1800,route  255.255.255.255,route  255.255.255.255,route  255.255.255.255,route  255.255.255.255,route  255.255.255.255,route  255.255.255.255,route  255.255.255.255,route 10.143.143.1 255.255.255.255,route 66.XXX.XXX.XXX 255.255.255.255,route 10.13.0.1 255.255.255.255,route 66.232.67.148 255.255.255.255,route 10.13.100.37 255.255.255.255,route 172.67.70.0 255.255.255.0,route 10.13.4.1 255.255.255.255,route 10.13.4.2 255.255.255.255,route 172.2.1.0 255.255.255.0,route 192.168.101.0 255.255.255.0,route 10.13.0.0 255.255.0.0,route 10.13.4.14 255.255.255.255,route 10.13.100.200 255.255.255.255,route 172.16.1.0 255.255.255.0,route 172.27.28.0 255.255.255.0,route 172.27.24.0 255.255.255.0,route 10.13.100.218 255.255.255.255,route 10.81.234.0 255.255.255.0,topology subnet,route remote_host 255.255.255.255 net_gateway,ifconfig 10.81.234.13 255.255.255.0'
Thu Aug 12 09:47:05 2021 OPTIONS IMPORT: timers and/or timeouts modified
Thu Aug 12 09:47:05 2021 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Thu Aug 12 09:47:05 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:47:05 2021 OPTIONS IMPORT: --ifconfig/up options modified
Thu Aug 12 09:47:05 2021 OPTIONS IMPORT: route options modified
Thu Aug 12 09:47:05 2021 OPTIONS IMPORT: route-related options modified
Thu Aug 12 09:47:05 2021 ROUTE_GATEWAY 192.168.10.1/255.255.255.0 I=9 HWADDR=74:e5:f9:59:bb:22
Thu Aug 12 09:47:05 2021 open_tun, tt->ipv6=0
Thu Aug 12 09:47:05 2021 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{A39778AD-2EAC-40EF-9B70-37A9B5B3E769}.tap
Thu Aug 12 09:47:05 2021 TAP-Windows Driver Version 9.21 
Thu Aug 12 09:47:05 2021 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.13/255.255.255.0 [SUCCEEDED]
Thu Aug 12 09:47:05 2021 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.13/255.255.255.0 on interface {A39778AD-2EAC-40EF-9B70-37A9B5B3E769} [DHCP-serv: 10.81.234.254, lease-time: 31536000]
Thu Aug 12 09:47:05 2021 Successful ARP Flush on interface [15] {A39778AD-2EAC-40EF-9B70-37A9B5B3E769}
Thu Aug 12 09:47:05 2021 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Aug 12 09:47:05 2021 MANAGEMENT: >STATE:1628783225,ASSIGN_IP,,10.81.234.13,,,,
Thu Aug 12 09:47:09 2021 TEST ROUTES: 27/27 succeeded len=27 ret=1 a=0 u/d=up
Thu Aug 12 09:47:09 2021 MANAGEMENT: >STATE:1628783229,ADD_ROUTES,,,,,,
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 66.XXX.XXX.XXX MASK 255.255.255.255 192.168.10.1
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 255.255.255.255 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 255.255.255.255 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 ROUTE: route addition failed using service: The object already exists.   [status=5010 if_index=15]
Thu Aug 12 09:47:09 2021 Route addition via service failed
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 255.255.255.255 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 ROUTE: route addition failed using service: The object already exists.   [status=5010 if_index=15]
Thu Aug 12 09:47:09 2021 Route addition via service failed
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 255.255.255.255 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 ROUTE: route addition failed using service: The object already exists.   [status=5010 if_index=15]
Thu Aug 12 09:47:09 2021 Route addition via service failed
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 255.255.255.255 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 ROUTE: route addition failed using service: The object already exists.   [status=5010 if_index=15]
Thu Aug 12 09:47:09 2021 Route addition via service failed
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 255.255.255.255 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 ROUTE: route addition failed using service: The object already exists.   [status=5010 if_index=15]
Thu Aug 12 09:47:09 2021 Route addition via service failed
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 255.255.255.255 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 ROUTE: route addition failed using service: The object already exists.   [status=5010 if_index=15]
Thu Aug 12 09:47:09 2021 Route addition via service failed
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.143.143.1 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 66.XXX.XXX.XXX MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.0.1 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 66.232.67.148 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.100.37 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 172.67.70.0 MASK 255.255.255.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.4.1 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.4.2 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 172.2.1.0 MASK 255.255.255.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 192.168.101.0 MASK 255.255.255.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.0.0 MASK 255.255.0.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.4.14 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.100.200 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 172.16.1.0 MASK 255.255.255.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 172.27.28.0 MASK 255.255.255.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 172.27.24.0 MASK 255.255.255.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.13.100.218 MASK 255.255.255.255 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 10.81.234.0 MASK 255.255.255.0 10.81.234.5
Thu Aug 12 09:47:09 2021 Route addition via service succeeded
Thu Aug 12 09:47:09 2021 C:\WINDOWS\system32\route.exe ADD 66.XXX.XXX.XXX MASK 255.255.255.255 192.168.10.1
Thu Aug 12 09:47:09 2021 ROUTE: route addition failed using service: The object already exists.   [status=5010 if_index=9]
Thu Aug 12 09:47:09 2021 Route addition via service failed
Thu Aug 12 09:47:09 2021 Initialization Sequence Completed
Thu Aug 12 09:47:09 2021 MANAGEMENT: >STATE:1628783229,CONNECTED,SUCCESS,10.81.234.13,66.XXX.XXX.XXX,8443,192.168.10.184,55210
Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)
Thu Aug 12 09:47:28 2021 Connection reset, restarting [-1]
Thu Aug 12 09:47:28 2021 SIGUSR1[soft,connection-reset] received, process restarting
Thu Aug 12 09:47:28 2021 MANAGEMENT: >STATE:1628783248,RECONNECTING,connection-reset,,,,,
Thu Aug 12 09:47:28 2021 Restart pause, 5 second(s)
Thu Aug 12 09:47:33 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:47:33 2021 Attempting to establish TCP connection with [AF_INET]66.XXX.XXX.XXX:8443 [nonblock]
Thu Aug 12 09:47:33 2021 MANAGEMENT: >STATE:1628783253,TCP_CONNECT,,,,,,
Thu Aug 12 09:47:44 2021 TCP: connect to [AF_INET]66.XXX.XXX.XXX:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:47:44 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:47:44 2021 MANAGEMENT: >STATE:1628783264,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:47:44 2021 Restart pause, 5 second(s)
Thu Aug 12 09:47:49 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:47:49 2021 Attempting to establish TCP connection with [AF_INET]10.253.0.1:8443 [nonblock]
Thu Aug 12 09:47:49 2021 MANAGEMENT: >STATE:1628783269,TCP_CONNECT,,,,,,
Thu Aug 12 09:47:59 2021 TCP: connect to [AF_INET]10.253.0.1:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:47:59 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:47:59 2021 MANAGEMENT: >STATE:1628783279,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:47:59 2021 Restart pause, 5 second(s)
Thu Aug 12 09:48:04 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:48:04 2021 Attempting to establish TCP connection with [AF_INET]66.XXX.XXX.XXX:8443 [nonblock]
Thu Aug 12 09:48:04 2021 MANAGEMENT: >STATE:1628783284,TCP_CONNECT,,,,,,
Thu Aug 12 09:48:14 2021 TCP: connect to [AF_INET]66.XXX.XXX.XXX:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:48:14 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:48:14 2021 MANAGEMENT: >STATE:1628783294,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:48:14 2021 Restart pause, 5 second(s)
Thu Aug 12 09:48:19 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:48:19 2021 Attempting to establish TCP connection with [AF_INET]10.253.0.1:8443 [nonblock]
Thu Aug 12 09:48:19 2021 MANAGEMENT: >STATE:1628783299,TCP_CONNECT,,,,,,
Thu Aug 12 09:48:29 2021 TCP: connect to [AF_INET]10.253.0.1:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:48:29 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:48:29 2021 MANAGEMENT: >STATE:1628783309,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:48:29 2021 Restart pause, 5 second(s)
Thu Aug 12 09:48:34 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:48:34 2021 Attempting to establish TCP connection with [AF_INET]66.XXX.XXX.XXX:8443 [nonblock]
Thu Aug 12 09:48:34 2021 MANAGEMENT: >STATE:1628783314,TCP_CONNECT,,,,,,
Thu Aug 12 09:48:44 2021 TCP: connect to [AF_INET]66.XXX.XXX.XXX:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:48:44 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:48:44 2021 MANAGEMENT: >STATE:1628783324,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:48:44 2021 Restart pause, 5 second(s)
Thu Aug 12 09:48:49 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:48:49 2021 Attempting to establish TCP connection with [AF_INET]10.253.0.1:8443 [nonblock]
Thu Aug 12 09:48:49 2021 MANAGEMENT: >STATE:1628783329,TCP_CONNECT,,,,,,
Thu Aug 12 09:48:59 2021 TCP: connect to [AF_INET]10.253.0.1:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:48:59 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:48:59 2021 MANAGEMENT: >STATE:1628783339,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:48:59 2021 Restart pause, 5 second(s)
Thu Aug 12 09:49:04 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:49:04 2021 Attempting to establish TCP connection with [AF_INET]66.XXX.XXX.XXX:8443 [nonblock]
Thu Aug 12 09:49:04 2021 MANAGEMENT: >STATE:1628783344,TCP_CONNECT,,,,,,
Thu Aug 12 09:49:14 2021 TCP: connect to [AF_INET]66.XXX.XXX.XXX:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:49:14 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:49:14 2021 MANAGEMENT: >STATE:1628783354,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:49:14 2021 Restart pause, 5 second(s)
Thu Aug 12 09:49:19 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:49:19 2021 Attempting to establish TCP connection with [AF_INET]10.253.0.1:8443 [nonblock]
Thu Aug 12 09:49:19 2021 MANAGEMENT: >STATE:1628783359,TCP_CONNECT,,,,,,
Thu Aug 12 09:49:29 2021 TCP: connect to [AF_INET]10.253.0.1:8443 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Thu Aug 12 09:49:29 2021 SIGUSR1[soft,init_instance] received, process restarting
Thu Aug 12 09:49:29 2021 MANAGEMENT: >STATE:1628783369,RECONNECTING,init_instance,,,,,
Thu Aug 12 09:49:29 2021 Restart pause, 5 second(s)
Thu Aug 12 09:49:34 2021 Socket Buffers: R=[65536->65536] S=[65536->65536]
Thu Aug 12 09:49:34 2021 Attempting to establish TCP connection with [AF_INET]66.XXX.XXX.XXX:8443 [nonblock]
Thu Aug 12 09:49:34 2021 MANAGEMENT: >STATE:1628783374,TCP_CONNECT,,,,,,

It appears the culprit is this:

Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 write TCPv4_CLIENT: Connection reset by peer (WSAECONNRESET) (code=10054)
Thu Aug 12 09:47:28 2021 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)

Any ideas?



This thread was automatically locked due to age.
Parents
  • 0

    There are different options for the problem....
    Where is the client located ? Possible the firewall at this location tries to  inspect port 8443 (a typical alternative HTTPS port - that's why I use 1194).
    Or VPN / OPENVPN is recognized and blocked by Firewall or ISP or others after the first connection is established .

  • 0 in reply to dirkkotte

    Hi dirkkotte, thanks for your response. The thing is we've turned his firewall off on his computer (unless there's some hidden one I couldn't see?) and we've tried several different networks with different gateways/different ISPs, including his mobile hotspot, and the issue persists regardless of what router/network he's connected on.

  • 0 in reply to Glen Garner

    do you try another device ... is the problem bound to the user or the device?

  • 0 in reply to dirkkotte

    Hi Dirk, i am having the same issue. Using a sophos xg firewall at the office and the sophos vpn client. No matter what network i use or what machine I use, i experience the issue. The odd thing is my peer took my laptop home with him and it worked without issues using my account.

  • 0 in reply to Michael Jimenez1

    Seen similar with Microsoft-DA.
    The cause of this problem seemed to be UDP. Some providers give you a private IP, and you and many others stand behind a single public IP ... the possible UDP connections can be overflowed and dropped. (some Cable-TV provider in Germany)
    Switching to SSL-VPN with TCP solves this problem.

    Are you using UDP? It may be more stable with TCP.

  • 0 in reply to dirkkotte

    Hi Dirk, our vpn and firewall are set to only use TCP. Not sure what else I can try. I did inquire with my peer and he is using COX at his home. I have turned off UDP on the ATT router with no luck in connection staying active. I really need to get additional advance help with this issue. I may be forced to change services if Im unable to get this resolved.

    Thanks!
    Mike

Reply
  • 0 in reply to dirkkotte

    Hi Dirk, our vpn and firewall are set to only use TCP. Not sure what else I can try. I did inquire with my peer and he is using COX at his home. I have turned off UDP on the ATT router with no luck in connection staying active. I really need to get additional advance help with this issue. I may be forced to change services if Im unable to get this resolved.

    Thanks!
    Mike

Children
No Data