We opened a support case at Sophos Service.
There is a bug in the group authentication from AD. (NUTM-3775)
The workaround is to put every single VPN User in the authentication-box by hand.
This is a horrible job if you have lot of VPN User
Anyone who think about update to 9.401-11 should wait for the fix.
This thread was automatically locked due to age.
