This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to access vpn client connected to XG firewall SFOS 19.0.0 GA-Build31

I am managing a nas (Unraid) that doesn't have permanent IP, or Dynamic IP. In order to manage the device, I installed Openvpn-client onto the NAS, and put my Sophos' remote SSL VPN config on Openvpn-client. The client can now connect to my firewall, and I can ping the IP Address assigned onto the NAS already. You can access the nas via ip_address on the URL of a browser. I can't though. Any ideas why?

This thread was automatically locked due to age.

Parents

0 Vivek Jagad over 3 years ago

Hello jang430,

Thank you for reaching out to the community, could you please refer the following community link to double check the config on v19:
https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/132121/ssl-vpn-ipv4-lease-range-changes-in-sfos-v19

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 3 years ago in reply to Vivek Jagad

Hi. I've followed the instructions just to be sure, and yet, it's not working.

Just to be clear, it is the PC on the home network (where firewall is at) that cannot access remote NAS (the one that has Openvpn-client installed).

I can see in my firewall I have 1 VPN connection. I can ping that IP address 10.81.234.X
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 jang430 over 3 years ago in reply to Vivek Jagad

Hi. I've followed the instructions just to be sure, and yet, it's not working.

Just to be clear, it is the PC on the home network (where firewall is at) that cannot access remote NAS (the one that has Openvpn-client installed).

I can see in my firewall I have 1 VPN connection. I can ping that IP address 10.81.234.X
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Vivek Jagad over 3 years ago in reply to jang430

Do you have a rules in place LAN to VPN and VPN to LAN ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 3 years ago in reply to Vivek Jagad

I have LAN, Anyhost to VPN, Anyhost, Any service
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 3 years ago in reply to jang430

Can you share a screenshot via packet capture utility to determine whether the traffic does pass into the tun0 interface...
Monitor traffic using Packet Capture Utility : https://support.sophos.com/support/s/article/KB-000035761?language=en_US

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 3 years ago in reply to Vivek Jagad

Can't seem to upload a screenshot. After turning on packet capture, I've got a table. I used filter to filter Rule ID 2, which is my LAN to VPN Rule ID, came out empty.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 3 years ago in reply to jang430

Simply use snipping tool and just try pasting the screenshot, between can you tell us how a packet is travelling? From which interface to which interface ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 3 years ago in reply to Vivek Jagad
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 3 years ago in reply to jang430

Hello jang430, Thank you for the update as we can see the traffic is going out from the Port6 a WAN interface and not from the SSL VPN tunnel i.e. tun0 interface.
Can you provide us the set up config for your SSL VPN and also when the client is connected does it show under the remote users live section ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 3 years ago in reply to Vivek Jagad

Yes, when client is connected, I can see it in control center.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 3 years ago in reply to jang430

Not here, I am talking about Current activities > Remote users

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 3 years ago in reply to Vivek Jagad
Cancel
Vote Up 0 Vote Down

Cancel

How to access vpn client connected to XG firewall SFOS 19.0.0 GA-Build31

Submitted a Tech Support Case lately from the Support Portal?