Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 27 replies
  • Subscribers 1 subscriber
  • Views 5798 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL problems after updating to 7.006

alasc
After updating to V 7.006 i cannot reach my internal network.
I also have to authenticate two times when I initially connect.

In OpenVPN log there´s no entry and in Packetfilter log is no entry, too.

What´s going on?
I will have quite a bad day tomorrow when my users want to access network 
They will not be able to work.

Any hints?

Regards,
Alex


This thread was automatically locked due to age.
Parents
  • 0
    Well that makes two of us... are you authenticating SSL users to a backend (in our case, Active Directory)? I found the issue is related to using a backend to authenticate; when I created a test user with local (to the Astaro) authentication, it only takes one try to logon the vpn.  I started a ticket Saturday afternoon, I'm sure I'll hear from Astaro Monday... good (actually not good) to hear that we're not the only ones with the SSL problem.  Additionally I might add that there's no errors listed in the AUA log either on our production unit.

    Also found that something in this release breaks NAT Traversal for clients behind a NAT when using the IPSEC remote access... also started a ticket with Astaro on that... this release seems to have added a number of bugs...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Hi,

    i only have local users but theay are all being nat´ed.

    Hope this will be fixed soon.
    Can you post the answer from Astaro on this topic here, please.

    Kind regards,

    Alex
  • 0 in reply to alasc
    Nope, I've emailed them this morning to see if they've gotten anywhere with this... I'm starting to think this has more to do with NAT than authentication -- seeing as how NAT is causing issues with our IPSEC connections as well.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Good morning,

    are there any updates ? I ´ve not seen this issue on Known Issue List yet.

    Kind regards,

    Alex
  • 0 in reply to alasc
    No updates... all I've been told is my case is with the "escalation" team...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    That´s bad news for us all ...

    Please write if you receive any updates from Astaro.
    I need this feature again. 

    Have a nice day.

    Regards,

    Alex
  • 0 in reply to alasc
    Latest update: they're working on a fix, no eta.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Thank you !

    Keep us updated ...

    Kind regards,

    Alex
  • 0 in reply to alasc
    Ssl is working correct. The problem would be in the Intrusion protection system.
    Disable this and your problem is most likely solved!
    Now you do not need the disable entire IPS. Only a part of it.
    You are right that the problem came with version 7.006!!!
    I hope this helps you to solve yours.

    Greetings.

    If you have a question about ips just ask!
  • 0 in reply to ibeheer
    Hi,

    which part of IPS do you mean ? I disabled whole IPS but SSL doesn ´t work.

    Regards,

    Alex
  • 0 in reply to alasc
    Uh... no... it's not IPS... Astaro has confirmed the SSL issue as an Authentication issue, and are working on a fix.  For me, simply changing the authentication from AD Integrated to Local allows it to work properly... they've confirmed the issue, and will have to implement a fix in a future (hopefully the next one) up2date.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Attacks against Servers > HTTP Servers > Common > Set option to alert and notification to off.


    If you don't turn this setting off you can't download in het user portal from an external link.
Reply Children
Cookie Information Banner