Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 31 subscribers
  • Views 37037 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN Stopped Working - SFOS 16.05.1 MR-1

ShawnGilronan

I recently updated my Sophos XG Firewall to the latest firmware SFOS 16.05.1 MR-1 from v15.  After updating, I noticed my SSL VPN stopped working.  After trying everything I could read to get it to work, I started from scratch, and recreated the SSL VPN, following the guide published here:  https://community.sophos.com/products/xg-firewall/f/vpn/86979/i-need-instructions-step-by-step-setting-up-xg-105-ssl-vpn-remote-access

 

After having everything setup as per the guide, each time I try and connect, I get the same error: 

tls error: tls key negotiation failed to occur within 60 seconds.

 

I have tried both the Sophos SSL client, as well as SecurePoint SSL, and receive the same issue when trying to connect over UDP.

I'm not sure what to try next.

Thanks,

Shawn



This thread was automatically locked due to age.
Parents
  • 0
    Hi,
     
    You recreated the certificate after the firmware update?
     
    I had a similar issue and solved with the following actions:
     
    - Delete all user certificates;
    - Regenerate the XG certificate;
    - On the console, run the command "show vpn IPSec-logs" (it gives a certificate loading error the first time) twice; This helped ;-)
    - Create a new certificate for users through the portal.
     
    Hope this helps
     
     
     
Reply
  • 0
    Hi,
     
    You recreated the certificate after the firmware update?
     
    I had a similar issue and solved with the following actions:
     
    - Delete all user certificates;
    - Regenerate the XG certificate;
    - On the console, run the command "show vpn IPSec-logs" (it gives a certificate loading error the first time) twice; This helped ;-)
    - Create a new certificate for users through the portal.
     
    Hope this helps
     
     
     
Children
No Data