I've been having a problem where Sophos disconnects brand new dell laptops. Every time I factory reset them (Clean installation of Windows) Connection is established and it doesn't disconnect. This is what I found in the SSL VPN log:
2022-10-16 18:03:21Z [5267] TCP connection established with [AF_INET6]::ffff:20.
90.28.223:52855
2022-10-16 18:03:21Z [5267] 20.90.28.223:52855 WARNING: Bad encapsulated packet
length from peer (18245), which must be > 0 and <= 1627 -- please ensure that --
tun-mtu or --link-mtu is equal on both peers -- this condition could also indica
te a possible active attack on the TCP link -- [Attempting restart...]
2022-10-16 18:03:21Z [5267] 20.90.28.223:52855 Connection reset, restarting [0]
2022-10-16 18:03:21Z [5267] 20.90.28.223:52855 SIGUSR1[soft,connection-reset] re
ceived, client-instance restarting
2022-10-16 18:03:21Z [5267] TCP connection established with [AF_INET6]::ffff:20.
90.28.223:53035
2022-10-16 18:03:21Z [5267] 20.90.28.223:53035 WARNING: Bad encapsulated packet
length from peer (18245), which must be > 0 and <= 1627 -- please ensure that --
tun-mtu or --link-mtu is equal on both peers -- this condition could also indica
te a possible active attack on the TCP link -- [Attempting restart...]
2022-10-16 18:03:21Z [5267] 20.90.28.223:53035 Connection reset, restarting [0]
2022-10-16 18:03:21Z [5267] 20.90.28.223:53035 SIGUSR1[soft,connection-reset] re
ceived, client-instance restarting
2022-10-16 18:08:09Z [5267] techplat/142.186.52.212:50110 [techplat] Inactivity
timeout (--ping-restart), restarting
2022-10-16 18:08:09Z [5267] techplat/142.186.52.212:50110 SIGUSR1[soft,ping-rest
art] received, client-instance restarting
Authentication server 127.0.0.1 gave login response code 2
GARNER: log disconnect event: username=techplat
2022-10-16 18:08:09Z [5267] PLUGIN_CALL: POST /lib/openvpn-plugin-utm.so/PLUGIN_
CLIENT_DISCONNECT status=0
DELETE 1
COMMIT
ipset v6.38: Element cannot be deleted from the set: it's not added
ipset v6.38: Element cannot be deleted from the set: it's not added
ipset v6.38: Element cannot be deleted from the set: it's not added
2022-10-16 18:08:47Z [5267] techplat/142.186.52.212:50143 [techplat] Inactivity
timeout (--ping-restart), restarting
2022-10-16 18:08:47Z [5267] techplat/142.186.52.212:50143 SIGUSR1[soft,ping-rest
art] received, client-instance restarting
Authentication server 127.0.0.1 gave login response code 2
GARNER: log disconnect event: username=techplat
2022-10-16 18:08:47Z [5267] PLUGIN_CALL: POST /lib/openvpn-plugin-utm.so/PLUGIN_
CLIENT_DISCONNECT status=0
DELETE 1
COMMIT
ipset v6.38: Element cannot be deleted from the set: it's not added
ipset v6.38: Element cannot be deleted from the set: it's not added
ipset v6.38: Element cannot be deleted from the set: it's not added
This thread was automatically locked due to age.
