Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 840 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG SSL VPN and DUO lockouts

BrentMagnant

Sorry if this has already been discussed, but my search didn't find it.

We are running into an issue where the SSL VPN client will drop a connection and then cause a DUO lockout after sending multiple auth attempts. Sophos support sent us to Sophos Connect, but it seems to have the same limitations.

Has any found a way to use DUO for SSL (via RADIUS proxy) that handles a VPN drop a little more gracefully?

Thanks!

Brent



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hi Brent, Thanks for reaching out to Sophos Community.

    Try Increasing the AUTH time-out in the RADIUS server settings and see if that works

  • 0 in reply to FormerMember

    I don't believe that will make a difference. That is only going to allow them more time to go thru the DUO auth.. 

    The issue I am having is that they leave the VPN on and go to lunch. Then if it drops, the client tries to reconnect multiple times, and locks out DUO. They aren't looking for a DUO push, so extending the time out probably wouldn't make a difference.

    9 times out of ten this is a user issue. They don't turn off the VPN when they are done using it. But sometimes it happens on a bad internet connection thru no fault of the user.

    Thanks for the thought though.