Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 27 replies
  • Subscribers 1 subscriber
  • Views 5787 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL problems after updating to 7.006

alasc
After updating to V 7.006 i cannot reach my internal network.
I also have to authenticate two times when I initially connect.

In OpenVPN log there´s no entry and in Packetfilter log is no entry, too.

What´s going on?
I will have quite a bad day tomorrow when my users want to access network 
They will not be able to work.

Any hints?

Regards,
Alex


This thread was automatically locked due to age.
Parents
  • 0
    Well that makes two of us... are you authenticating SSL users to a backend (in our case, Active Directory)? I found the issue is related to using a backend to authenticate; when I created a test user with local (to the Astaro) authentication, it only takes one try to logon the vpn.  I started a ticket Saturday afternoon, I'm sure I'll hear from Astaro Monday... good (actually not good) to hear that we're not the only ones with the SSL problem.  Additionally I might add that there's no errors listed in the AUA log either on our production unit.

    Also found that something in this release breaks NAT Traversal for clients behind a NAT when using the IPSEC remote access... also started a ticket with Astaro on that... this release seems to have added a number of bugs...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Hi,

    i only have local users but theay are all being nat´ed.

    Hope this will be fixed soon.
    Can you post the answer from Astaro on this topic here, please.

    Kind regards,

    Alex
  • 0 in reply to alasc
    Wierd... for us it's tied to AD... nonetheless, it appears we're affected by a similar bug, we'll see what happens.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Are there any updates yet ?

    Regards,

    Alex Ascherl
  • 0 in reply to alasc
    Nope, I've emailed them this morning to see if they've gotten anywhere with this... I'm starting to think this has more to do with NAT than authentication -- seeing as how NAT is causing issues with our IPSEC connections as well.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Good morning,

    are there any updates ? I ´ve not seen this issue on Known Issue List yet.

    Kind regards,

    Alex
  • 0 in reply to alasc
    No updates... all I've been told is my case is with the "escalation" team...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    That´s bad news for us all ...

    Please write if you receive any updates from Astaro.
    I need this feature again. 

    Have a nice day.

    Regards,

    Alex
  • 0 in reply to alasc
    Latest update: they're working on a fix, no eta.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply Children
Cookie Information Banner