SSLVPN and OpenVPN2.5 compatibility issue

Question

Hi, 
 Tunnelblick (Mac VPN program) is now giving me this warning when I use it to connect to UTM SSLVPN (remote access mode). 
 "Warning: This VPN may not connect in the future" 'comp-lzo' was deprecated in OpenVPN 2.4 and removed in OpenVPN 2.5 
 Yes, I can remove this option from my own VPN config, but I'm not going to do it for 100 of my users. Will Sophos remove it or add an option so its not included in the config file users download? 
 Regards Damien

BAlfson · Accepted Answer

Do not do the following without explicit approval in an email from Sophos Support! 
 As root at the command line: 
 cp /var/sec/chroot-openvpn/etc/openvpn/openvpn.conf /var/sec/chroot-openvpn/etc/openvpn/openvpn.conf.bak cp /var/sec/chroot-openvpn/etc/openvpn/openvpn.conf-default /var/sec/chroot-openvpn/etc/openvpn/openvpn.conf-default.bak 
 edit /var/sec/chroot-openvpn/etc/openvpn/openvpn.conf 
 Delete the line containing comp-lzo and write. 
 edit /var/sec/chroot-openvpn/etc/openvpn/openvpn.conf-default 
 Delete the line containing comp-lzo [<DISABLE_COMP>] and write. 
 Reboot. 
 No changing of the client configs is required. 
 You should be OK going forward unless Sophos changes openvpn.conf-default without removing comp-lzo. 
 Cheers - Bob

sachingurung · Answer

Hi Damien, 
 I am not aware of any discussions to add this to the UTM, I would recommend you to raise it as a Feature Request on Sophos Ideas . 
 Thanks,