This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect Provisioning File

Hello Members,

We have Sophos XG330 with 18.5.3 MR3 and are using Sophos Connect (IPSec Remote Access) for our remote / WFH users. We tried to use Provisioning File to import VPN configuration. We are getting failed to login error. In firewall logs - Authentication. It shows :

"User XXXXXX failed to login to MyAccount through Local authentication mechanism because of wrong credentials.

We've checked the login credentials, the user is able to log on to User Portal. but when try to connect in Sophos Connect. its unable to log on.

Any workaround / KB to resolve this issue.

This thread was automatically locked due to age.

0 Vishal_R over 3 years ago

Hi Ajay Sharma1 In place of provisioning file for testing purposes for 1 user if you download the config file from the user portal and after importing the config file in Sophos connect and log in manually via user credentials - is it working fine or getting an error?

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 xg-andy over 3 years ago

Have you allowed AD/Radius login method on services? For Firewall authentication as well as SSL vpn service.
Cancel
Vote Up 0 Vote Down

Cancel
0 Excommunicado over 3 years ago

Hi Ajay Sharma1,

Please put the access_server service in debugging and collect the access server logs to isolate the issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ajay Sharma1 over 3 years ago

Thanks for your replies

Vishal_R - Yes, without Provisioning file things are working fine. .scx as well as .ovpn connects well.

xg-andy : Sorry mate, no AD / RADIUS availability.

Excommunicado : Please guide how to, I'll do and share the same.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 3 years ago

This reads like one of the username/password issues currently only known with SSL VPN module. But I'm not aware if there are issues in the IPSec module.

Are these local users on the XG?

Test with simple username password combination if it's working and be sure, 2FA is not enabled for the test user.

Is the Userportal running on a different port than 443?
Cancel
Vote Up 0 Vote Down

Cancel
0 Ajay Sharma1 over 3 years ago in reply to LHerzog

Hi LHerzog,

Thanks for the response,

username / password is not any issue as theuser is able to log in to the User Portal.

These are local users configured on XG.

User portal is working on Port 443. and no 2FA is not enabled for any user.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 3 years ago in reply to Ajay Sharma1

Ajay Sharma1 said:
username / password is not any issue as theuser is able to log in to the User Portal.

that is no indication. the same is faulty in SSL VPN: userportal login works, VPN not
Cancel
Vote Up 0 Vote Down

Cancel
0 xg-andy over 3 years ago

Have you created an SSL VPN profile for the users/groups?
Cancel
Vote Up 0 Vote Down

Cancel
0 Ajay Sharma1 over 3 years ago in reply to LHerzog

SSL VPN and .scx working fine with the users credentials when used manually. I'm having issues with the provisioning file only.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ajay Sharma1 over 3 years ago in reply to xg-andy

its working fine.
Cancel
Vote Up 0 Vote Down

Cancel

Sophos Connect Provisioning File

Submitted a Tech Support Case lately from the Support Portal?