This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SD RED 60 Can not do SSL handshake on Socket accept from

Hi,

We have a deployment from around 21 SD-RED 60 which are working fine.

Now I need to test something and want to deploy another SD-RED 60 which was also working fine in the past. But now the RED cannot open a Tunnel and the red.log shows the following.

I tested another RED which has the same issue.

Regard´s

Silvio

This thread was automatically locked due to age.

Parents

0 Vivek Jagad over 2 years ago

Hello Silvio F ,

Thank you for reaching out to the community, SD-RED 20 & SD-RED 60 uses TCP 3400 + UDP 3410. And under the logs we can see the SSL handshake is failing.
Under the advance shell, you may check via: #telnet red.astaro.com 3400

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Silvio F over 2 years ago in reply to Vivek Jagad

Hello Vivek,

I know, thats what this log is showing. I want to know why the ssl handshake is failing because it makes no sense to me. This RED was in use till a week ago without any problems. I have the same Issue with another RED which was also in a productive Environment but now has issues with the SSL Handshake.

I can connecto on 3400 to red.astaro.com

Regards

Silvio
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Silvio F over 2 years ago in reply to Vivek Jagad

Hello Vivek,

I know, thats what this log is showing. I want to know why the ssl handshake is failing because it makes no sense to me. This RED was in use till a week ago without any problems. I have the same Issue with another RED which was also in a productive Environment but now has issues with the SSL Handshake.

I can connecto on 3400 to red.astaro.com

Regards

Silvio
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Vivek Jagad over 2 years ago in reply to Silvio F

can you share the tcpdump on Port 3400 ?
#tcpdump -nei any port 3400

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Silvio F over 2 years ago in reply to Vivek Jagad

What are you looking for exactly? As I mentioned above, there are 21 Reds in place, and if I dump for any Port 3400, there will be a lot of noise.

But now I´m perplexed. I changed the Gateway to an other IP for the Red and the tunnel is established. But this doesn't make any sense.
Cancel
Vote Up 0 Vote Down

Cancel
0 Raphael Alganes over 2 years ago in reply to Silvio F

Hi Silvio,

Thanks for reaching out to the Community and hope all is well.

Thanks for the information you have provided. May I suggest that if you are keen to pursue the ongoing issue, please open a ticket to have further check and investigated by an engineer. https://support.sophos.com/support/s/?language=en_US#t=AllTab&sort=relevancy Please select "For Critical Cases" if this is urgent and needs immediate assistance and already impacts operations.

Many thanks for your time and patience and thank you for choosing Sophos

Regards,

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel