Astaro.org (Read-Only)

UTM 9 Public Beta (closed) [8.951][BUG] IPS and Remote Access issues

[8.951][BUG] IPS and Remote Access issues

wingman over 13 years ago

Hi ALL

It seems that IPS somehow misdetects the first port-shifted IKE packet to udp/4500 after NAT detection.If I disable the IPS then I am able to connect fine via Ipsec

https://community.sophos.com/products/unified-threat-management/astaroorg/f/75/t/64144

Thanks

Parents

0 lmatt over 13 years ago

Hi wingman,

are there any log entries in the ips.log while you establish a connection?

regards,
lukas
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago in reply to lmatt

Hi wingman,

are there any log entries in the ips.log while you establish a connection?

regards,
lukas

Hi lukas

The info I got (re IPS issues) was from the list on my first post
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 wingman over 13 years ago in reply to lmatt

Hi wingman,

are there any log entries in the ips.log while you establish a connection?

regards,
lukas

Hi lukas

The info I got (re IPS issues) was from the list on my first post
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 lmatt over 13 years ago in reply to wingman

Hi lukas

The info I got (re IPS issues) was from the list on my first post

I cannot reproduce it. Maybe you can talk more about your configuration.

My setup looks like this:

* ASG (8.960009) enabled Cisco VPN Client
* Enabled IPS with all rules (extra warnings)
* IPad IOS 5.1

It would be awesome, if you can send me the /var/log/ips.log as well.

Cheers,
Lukas (lukas.matt@sophos.com)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Share Feedback

×

Submitted a Tech Support Case lately from the Support Portal?