This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect SSL VPN not disconnecting on firewall when user disconnects

I have users who are using Sophos Connect 2.2.90 to establish a connection to the firewall. The authentication step is VERY slow, but they eventually connect. The problem is this: when they disconnect using the DISCONNECT button in Sophos Connect, they are not always disconnected on the firewall (the firewall still reports them as live users). Problem is: they are unable to reconnect because they are only allowed X number of simultaneous connections.

Has anyone else experienced this? Is there a way to change it so the user is disconnected from the firewall once they disconnect in Sophos Connect?

Any help would be greatly appreciated. Thank you!

This thread was automatically locked due to age.

0 Bharat J over 2 years ago

Hi Deb Smith1

Please share the model number and firmware version running on Sophos XG Firewall

Regards

"Sophos Partner: Infrassist Technologies Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Deb Smith1 over 2 years ago

Thanks for your reply. The firewall model is: XGS126w.

Every user is set up for OTP. SSL VPN authentication can take up to 60 seconds. Problem is, my OTP codes change every 30 seconds. Not sure why this is happening, but it's very frustrating.

Thanks for your help!
Cancel
Vote Up 0 Vote Down

Cancel
0 Deb Smith1 over 2 years ago in reply to Deb Smith1

FYI: I turned off IPS, but no improvement.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Deb Smith1

Do you use UDP in SSLVPN instead of TCP?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Deb Smith1 over 2 years ago in reply to LuCar Toni

Yes - I'm using UDP instead of TCP, because I thought it was faster, but the more I read about SSL VPN over UDP, the more I feel like that is the problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 Bharat J over 2 years ago in reply to Deb Smith1
Hi Deb Smith1

Please check SSL VPN logs :

For SSL: Perform the following steps:

Select 5. Device Management and press Enter.

Select 3. Advanced Shell and press Enter.

Run the command tail -f /log/sslvpn.log.

Regards
"Sophos Partner: Infrassist Technologies Pvt Ltd".

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel