read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)

Hi Raphael Bauck,

How is the user authenticating to the SSL VPN ? 

Regards

Authentication is done by username and password.

Hi Raphael Bauck,

may I know which vpn client install on user system ?

Regards

install the ssl_vpn_client.exe 

Hi Raphael Bauck,

have you recently upgraded user system or sophos firmware to latest or any changes done in any OS or in current configuration?

regards 

I just updated the sophos firewall, but this connection problem, already occurred before. 

Below is a log of one of the crashes he had today.

Tue Feb 08 09:05:21 2022 OpenVPN 2.3.8 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [IPv6] built on Jul 3 2017
Tue Feb 08 09:05:21 2022 library versions: OpenSSL 1.0.2l 25 May 2017, LZO 2.09
Enter Management Password:
Tue Feb 08 09:05:21 2022 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Tue Feb 08 09:05:21 2022 Need hold release from management interface, waiting...
Tue Feb 08 09:05:21 2022 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Tue Feb 08 09:05:21 2022 MANAGEMENT: CMD 'state on'
Tue Feb 08 09:05:21 2022 MANAGEMENT: CMD 'log all on'
Tue Feb 08 09:05:21 2022 MANAGEMENT: CMD 'hold off'
Tue Feb 08 09:05:21 2022 MANAGEMENT: CMD 'hold release'
Tue Feb 08 09:05:25 2022 MANAGEMENT: CMD 'username "Auth" "dbt05"'
Tue Feb 08 09:05:25 2022 MANAGEMENT: CMD 'password [...]'
Tue Feb 08 09:05:26 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:05:26 2022 Attempting to establish TCP connection with [AF_INET]200.201.207.2:8443 [nonblock]
Tue Feb 08 09:05:26 2022 MANAGEMENT: >STATE:1644321926,TCP_CONNECT,,,,,,
Tue Feb 08 09:05:27 2022 TCP connection established with [AF_INET]200.201.207.2:8443
Tue Feb 08 09:05:27 2022 TCPv4_CLIENT link local: [undef]
Tue Feb 08 09:05:27 2022 TCPv4_CLIENT link remote: [AF_INET]200.201.207.2:8443
Tue Feb 08 09:05:27 2022 MANAGEMENT: >STATE:1644321927,WAIT,,,,,,
Tue Feb 08 09:05:27 2022 MANAGEMENT: >STATE:1644321927,AUTH,,,,,,
Tue Feb 08 09:05:27 2022 TLS: Initial packet from [AF_INET]200.201.207.2:8443, sid=6ebcda63 814d11b1
Tue Feb 08 09:05:27 2022 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Feb 08 09:05:27 2022 VERIFY OK: depth=1, C=BR, ST=NA, L=NA, O=Dibute Software Ltda, OU=OU, CN=Sophos_CA_C230763XWF2Y209, emailAddress=dep.infra_ti@dibute.com.br
Tue Feb 08 09:05:27 2022 VERIFY X509NAME OK: C=BR, ST=NA, L=NA, O=Dibute Software Ltda, OU=OU, CN=SophosApplianceCertificate_C230763XWF2Y209, emailAddress=dep.infra_ti@dibute.com.br
Tue Feb 08 09:05:27 2022 VERIFY OK: depth=0, C=BR, ST=NA, L=NA, O=Dibute Software Ltda, OU=OU, CN=SophosApplianceCertificate_C230763XWF2Y209, emailAddress=dep.infra_ti@dibute.com.br
Tue Feb 08 09:05:28 2022 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Feb 08 09:05:28 2022 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 08 09:05:28 2022 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Feb 08 09:05:28 2022 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 08 09:05:28 2022 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Feb 08 09:05:28 2022 [SophosApplianceCertificate_C230763XWF2Y209] Peer Connection Initiated with [AF_INET]200.201.207.2:8443
Tue Feb 08 09:05:29 2022 MANAGEMENT: >STATE:1644321929,GET_CONFIG,,,,,,
Tue Feb 08 09:05:30 2022 SENT CONTROL [SophosApplianceCertificate_C230763XWF2Y209]: 'PUSH_REQUEST' (status=1)
Tue Feb 08 09:05:30 2022 PUSH: Received control message: 'PUSH_REPLY,route-gateway 10.81.234.5,sndbuf 0,rcvbuf 0,sndbuf 0,rcvbuf 0,ping 450,ping-restart 1800,route 172.21.196.0 255.255.255.0,route 172.20.200.0 255.255.255.0,route 172.17.37.0 255.255.255.0,route 192.168.32.0 255.255.255.0,route 190.1.8.0 255.255.248.0,topology subnet,route remote_host 255.255.255.255 net_gateway,inactive 3600 30720,dhcp-option DNS 192.168.32.3,ifconfig 10.81.234.23 255.255.255.0'
Tue Feb 08 09:05:30 2022 OPTIONS IMPORT: timers and/or timeouts modified
Tue Feb 08 09:05:30 2022 OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
Tue Feb 08 09:05:30 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:05:30 2022 OPTIONS IMPORT: --ifconfig/up options modified
Tue Feb 08 09:05:30 2022 OPTIONS IMPORT: route options modified
Tue Feb 08 09:05:30 2022 OPTIONS IMPORT: route-related options modified
Tue Feb 08 09:05:30 2022 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue Feb 08 09:05:30 2022 ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=4 HWADDR=5c:c9:d3:53:fd:b0
Tue Feb 08 09:05:30 2022 open_tun, tt->ipv6=0
Tue Feb 08 09:05:30 2022 TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{433CAF0A-E669-408C-8ED5-D35632B8594C}.tap
Tue Feb 08 09:05:31 2022 TAP-Windows Driver Version 9.21
Tue Feb 08 09:05:31 2022 Set TAP-Windows TUN subnet mode network/local/netmask = 10.81.234.0/10.81.234.23/255.255.255.0 [SUCCEEDED]
Tue Feb 08 09:05:31 2022 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.81.234.23/255.255.255.0 on interface {433CAF0A-E669-408C-8ED5-D35632B8594C} [DHCP-serv: 10.81.234.254, lease-time: 31536000]
Tue Feb 08 09:05:31 2022 Successful ARP Flush on interface [26] {433CAF0A-E669-408C-8ED5-D35632B8594C}
Tue Feb 08 09:05:31 2022 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Feb 08 09:05:31 2022 MANAGEMENT: >STATE:1644321931,ASSIGN_IP,,10.81.234.23,,,,
Tue Feb 08 09:05:35 2022 TEST ROUTES: 7/7 succeeded len=7 ret=1 a=0 u/d=up
Tue Feb 08 09:05:35 2022 MANAGEMENT: >STATE:1644321935,ADD_ROUTES,,,,,,
Tue Feb 08 09:05:35 2022 C:\Windows\system32\route.exe ADD 200.201.207.2 MASK 255.255.255.255 192.168.0.1
Tue Feb 08 09:05:35 2022 Route addition via service succeeded
Tue Feb 08 09:05:35 2022 C:\Windows\system32\route.exe ADD 172.21.196.0 MASK 255.255.255.0 10.81.234.5
Tue Feb 08 09:05:35 2022 Route addition via service succeeded
Tue Feb 08 09:05:35 2022 C:\Windows\system32\route.exe ADD 172.20.200.0 MASK 255.255.255.0 10.81.234.5
Tue Feb 08 09:05:35 2022 Route addition via service succeeded
Tue Feb 08 09:05:35 2022 C:\Windows\system32\route.exe ADD 172.17.37.0 MASK 255.255.255.0 10.81.234.5
Tue Feb 08 09:05:35 2022 Route addition via service succeeded
Tue Feb 08 09:05:35 2022 C:\Windows\system32\route.exe ADD 192.168.32.0 MASK 255.255.255.0 10.81.234.5
Tue Feb 08 09:05:35 2022 Route addition via service succeeded
Tue Feb 08 09:05:35 2022 C:\Windows\system32\route.exe ADD 190.1.8.0 MASK 255.255.248.0 10.81.234.5
Tue Feb 08 09:05:35 2022 Route addition via service succeeded
Tue Feb 08 09:05:35 2022 C:\Windows\system32\route.exe ADD 200.201.207.2 MASK 255.255.255.255 192.168.0.1
Tue Feb 08 09:05:35 2022 ROUTE: route addition failed using service: O objeto já existe. [status=5010 if_index=4]
Tue Feb 08 09:05:35 2022 Route addition via service failed
Tue Feb 08 09:05:35 2022 Initialization Sequence Completed
Tue Feb 08 09:05:35 2022 MANAGEMENT: >STATE:1644321935,CONNECTED,SUCCESS,10.81.234.23,200.201.207.2,8443,192.168.0.12,50776
Tue Feb 08 09:09:26 2022 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)
Tue Feb 08 09:09:26 2022 Connection reset, restarting [-1]
Tue Feb 08 09:09:26 2022 SIGUSR1[soft,connection-reset] received, process restarting
Tue Feb 08 09:09:26 2022 MANAGEMENT: >STATE:1644322166,RECONNECTING,connection-reset,,,,,
Tue Feb 08 09:09:26 2022 Restart pause, 5 second(s)
Tue Feb 08 09:09:31 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:09:31 2022 Attempting to establish TCP connection with [AF_INET]200.201.207.2:8443 [nonblock]
Tue Feb 08 09:09:31 2022 MANAGEMENT: >STATE:1644322171,TCP_CONNECT,,,,,,
Tue Feb 08 09:09:41 2022 TCP: connect to [AF_INET]200.201.207.2:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:09:41 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:09:41 2022 MANAGEMENT: >STATE:1644322181,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:09:41 2022 Restart pause, 5 second(s)
Tue Feb 08 09:09:46 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:09:46 2022 Attempting to establish TCP connection with [AF_INET]10.255.0.1:8443 [nonblock]
Tue Feb 08 09:09:46 2022 MANAGEMENT: >STATE:1644322186,TCP_CONNECT,,,,,,
Tue Feb 08 09:09:56 2022 TCP: connect to [AF_INET]10.255.0.1:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:09:56 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:09:56 2022 MANAGEMENT: >STATE:1644322196,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:09:56 2022 Restart pause, 5 second(s)
Tue Feb 08 09:10:01 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:10:01 2022 Attempting to establish TCP connection with [AF_INET]172.20.200.88:8443 [nonblock]
Tue Feb 08 09:10:01 2022 MANAGEMENT: >STATE:1644322201,TCP_CONNECT,,,,,,
Tue Feb 08 09:10:11 2022 TCP: connect to [AF_INET]172.20.200.88:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:10:11 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:10:11 2022 MANAGEMENT: >STATE:1644322211,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:10:11 2022 Restart pause, 5 second(s)
Tue Feb 08 09:10:16 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:10:16 2022 Attempting to establish TCP connection with [AF_INET]10.10.10.30:8443 [nonblock]
Tue Feb 08 09:10:16 2022 MANAGEMENT: >STATE:1644322216,TCP_CONNECT,,,,,,
Tue Feb 08 09:10:26 2022 TCP: connect to [AF_INET]10.10.10.30:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:10:26 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:10:26 2022 MANAGEMENT: >STATE:1644322226,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:10:26 2022 Restart pause, 5 second(s)
Tue Feb 08 09:10:31 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:10:31 2022 Attempting to establish TCP connection with [AF_INET]190.1.8.240:8443 [nonblock]
Tue Feb 08 09:10:31 2022 MANAGEMENT: >STATE:1644322231,TCP_CONNECT,,,,,,
Tue Feb 08 09:10:41 2022 TCP: connect to [AF_INET]190.1.8.240:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:10:41 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:10:41 2022 MANAGEMENT: >STATE:1644322241,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:10:41 2022 Restart pause, 5 second(s)
Tue Feb 08 09:10:46 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:10:46 2022 Attempting to establish TCP connection with [AF_INET]10.10.10.65:8443 [nonblock]
Tue Feb 08 09:10:46 2022 MANAGEMENT: >STATE:1644322246,TCP_CONNECT,,,,,,
Tue Feb 08 09:10:56 2022 TCP: connect to [AF_INET]10.10.10.65:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:10:56 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:10:56 2022 MANAGEMENT: >STATE:1644322256,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:10:56 2022 Restart pause, 5 second(s)
Tue Feb 08 09:11:01 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:11:01 2022 Attempting to establish TCP connection with [AF_INET]172.17.37.200:8443 [nonblock]
Tue Feb 08 09:11:01 2022 MANAGEMENT: >STATE:1644322261,TCP_CONNECT,,,,,,
Tue Feb 08 09:11:11 2022 TCP: connect to [AF_INET]172.17.37.200:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:11:11 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:11:11 2022 MANAGEMENT: >STATE:1644322271,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:11:11 2022 Restart pause, 5 second(s)
Tue Feb 08 09:11:16 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:11:16 2022 Attempting to establish TCP connection with [AF_INET]172.20.199.199:8443 [nonblock]
Tue Feb 08 09:11:16 2022 MANAGEMENT: >STATE:1644322276,TCP_CONNECT,,,,,,
Tue Feb 08 09:11:26 2022 TCP: connect to [AF_INET]172.20.199.199:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:11:26 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:11:26 2022 MANAGEMENT: >STATE:1644322286,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:11:26 2022 Restart pause, 5 second(s)
Tue Feb 08 09:11:31 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:11:31 2022 Attempting to establish TCP connection with [AF_INET]192.168.32.129:8443 [nonblock]
Tue Feb 08 09:11:31 2022 MANAGEMENT: >STATE:1644322291,TCP_CONNECT,,,,,,
Tue Feb 08 09:11:41 2022 TCP: connect to [AF_INET]192.168.32.129:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:11:41 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:11:41 2022 MANAGEMENT: >STATE:1644322301,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:11:41 2022 Restart pause, 5 second(s)
Tue Feb 08 09:11:46 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:11:46 2022 Attempting to establish TCP connection with [AF_INET]172.17.1.100:8443 [nonblock]
Tue Feb 08 09:11:46 2022 MANAGEMENT: >STATE:1644322306,TCP_CONNECT,,,,,,
Tue Feb 08 09:11:56 2022 TCP: connect to [AF_INET]172.17.1.100:8443 failed, will try again in 5 seconds: O sistema tentou unir uma unidade a uma pasta em uma unidade já incluída.
Tue Feb 08 09:11:56 2022 SIGUSR1[soft,init_instance] received, process restarting
Tue Feb 08 09:11:56 2022 MANAGEMENT: >STATE:1644322316,RECONNECTING,init_instance,,,,,
Tue Feb 08 09:11:56 2022 Restart pause, 5 second(s)
Tue Feb 08 09:12:01 2022 Socket Buffers: R=[65536->65536] S=[65536->65536]
Tue Feb 08 09:12:01 2022 Attempting to establish TCP connection with [AF_INET]200.201.207.2:8443 [nonblock]
Tue Feb 08 09:12:01 2022 MANAGEMENT: >STATE:1644322321,TCP_CONNECT,,,,,,
Tue Feb 08 09:12:02 2022 TCP connection established with [AF_INET]200.201.207.2:8443
Tue Feb 08 09:12:02 2022 TCPv4_CLIENT link local: [undef]
Tue Feb 08 09:12:02 2022 TCPv4_CLIENT link remote: [AF_INET]200.201.207.2:8443
Tue Feb 08 09:12:02 2022 MANAGEMENT: >STATE:1644322322,WAIT,,,,,,
Tue Feb 08 09:12:02 2022 MANAGEMENT: >STATE:1644322322,AUTH,,,,,,
Tue Feb 08 09:12:02 2022 TLS: Initial packet from [AF_INET]200.201.207.2:8443, sid=073fed82 2d59abee
Tue Feb 08 09:12:02 2022 VERIFY OK: depth=1, C=BR, ST=NA, L=NA, O=Dibute Software Ltda, OU=OU, CN=Sophos_CA_C230763XWF2Y209, emailAddress=dep.infra_ti@dibute.com.br
Tue Feb 08 09:12:02 2022 VERIFY X509NAME OK: C=BR, ST=NA, L=NA, O=Dibute Software Ltda, OU=OU, CN=SophosApplianceCertificate_C230763XWF2Y209, emailAddress=dep.infra_ti@dibute.com.br
Tue Feb 08 09:12:02 2022 VERIFY OK: depth=0, C=BR, ST=NA, L=NA, O=Dibute Software Ltda, OU=OU, CN=SophosApplianceCertificate_C230763XWF2Y209, emailAddress=dep.infra_ti@dibute.com.br
Tue Feb 08 09:12:03 2022 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Feb 08 09:12:03 2022 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 08 09:12:03 2022 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Tue Feb 08 09:12:03 2022 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Tue Feb 08 09:12:03 2022 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Tue Feb 08 09:12:03 2022 [SophosApplianceCertificate_C230763XWF2Y209] Peer Connection Initiated with [AF_INET]200.201.207.2:8443
Tue Feb 08 09:12:04 2022 MANAGEMENT: >STATE:1644322324,GET_CONFIG,,,,,,
Tue Feb 08 09:12:06 2022 SENT CONTROL [SophosApplianceCertificate_C230763XWF2Y209]: 'PUSH_REQUEST' (status=1)
Tue Feb 08 09:12:06 2022 AUTH: Received control message: AUTH_FAILED
Tue Feb 08 09:12:06 2022 SIGUSR1[soft,auth-failure] received, process restarting
Tue Feb 08 09:12:06 2022 MANAGEMENT: >STATE:1644322326,RECONNECTING,auth-failure,,,,,
Tue Feb 08 09:12:06 2022 Restart pause, 5 second(s)

Hi Raphael Bauck .

Did you configure the override hostname on ssl vpn under vpn > show vpn settings?

Please check by download the SSL vpn config again from user portal. If users are imported from Windows AD then you need to check whether they have permission to access the SSL VPN channel (user and group).

May you also conclude that there is probably a problem with the certificates associated with the user ?

Regards