This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN from India

I have a client that has a dataentry person that works from India. I tried to get the SSL VPN to work last night but it kept failing with a TLS handshake failure. I am thinking it may be due to timezone differences. My VPN firewall rule allows all as source so I dont think I have any country blocking in place. Any ideas?

This thread was automatically locked due to age.

Parents

0 lferrara over 8 years ago

Seth,

try the same account from your country and see if it works. Try to re-create the account.

Are other users using the SSL VPN?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Seth Martin over 8 years ago in reply to lferrara

Yeah I tried it from here in Montana and it works fine. I did not re-create the user but tried other user's and they also did not work and work fine from the US. I have 8 other VPN users... I am operating on port 8443. Apparently there is nothing on the India network that would be stopping that port from going out to the XG here in Missoula.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Seth Martin

Seth,

If users in India are behind another firewall/proxy make sure to create an https exception for your public IP address.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Seth Martin over 8 years ago in reply to lferrara

I was able to get to the User portal fine from a web-browser on their computer. The XG is behind a DSL modem with a dynamic IP so we use Dyn DNS to get the correct IP address-- nslookup on their machine resolves correctly. Because of the DSL I have to manually edit the OVPN file to include the remote epicsteel.dyndns.org 8443 which is working on all other machines besides theirs.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Seth Martin over 8 years ago in reply to lferrara

I was able to get to the User portal fine from a web-browser on their computer. The XG is behind a DSL modem with a dynamic IP so we use Dyn DNS to get the correct IP address-- nslookup on their machine resolves correctly. Because of the DSL I have to manually edit the OVPN file to include the remote epicsteel.dyndns.org 8443 which is working on all other machines besides theirs.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 lferrara over 8 years ago in reply to Seth Martin

Seth,

On XG configure the override hostname field under vpn > show vpn settings > ssl

Download the configuration again from user portal.
Cancel
Vote Up 0 Vote Down

Cancel
0 Seth Martin over 8 years ago in reply to lferrara

Why would it not be working for someone in India but works fine in the US without this setting in place? It will be difficult to re-download the VPN config for all the users as I have to establish remote sessions with them.. any other workaround to just take care of the one person in India such as editing their config file? As I said the DNS resolves correctly from their computer...
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Seth Martin

I would suggest you to run a tcpdump on port 8443, filtering by the indja's ip and share here the results.
Cancel
Vote Up 0 Vote Down

Cancel