Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN connects, but doesn't route traffic or do much at all

I recently upgraded to ASG 7.500.  Prior to the upgrade, my SSL VPN worked fine; however, after the upgrade, it is no longer working properly.  I downloaded and installed the latest client from the user portal (for Windows 7 RTM x64), and ran it as Administrator.   It connects to my ASG and gives me an IP address from the VPN Pool (SSL), but it doesn't tunnel my network traffic through the VPN connection (for example, my external IP address does not change, like it used to when it was working properly).  The Astaro client shows that it connects properly and everything looks like it's working, but nothing actually happens with the network traffic.

I checked the network addresses and subnet masks of all other VPN Pools (Cisco, IPSec, L2TP, and PPTP) and they are all properly subnetted into non-conflicting and separate networks. (With a /24 subnet mask)

Under Network Security --> NAT, Masquerading, there is a rule to allow VPN Pool (SSL) -> External (WAN).  I have not changed any configuration settings--I have only upgraded to 7.500.

When I view the live SSL VPN log, it shows everything connecting properly and doesn't show any errors.  The last line shows "Peer Connection Initiated with x.x.x.x"

Could it be that my campus is blocking SSL VPN connections somehow?  If I understand correctly, they would have to block port 443 (which my ASG is configured to use for SSL VPN connections), which would also disallow secure connections to web sites, etc.

The problem exhibits itself on both Windows (with the Astaro/OpenVPN client) and Mac OS X using (using Tunnelblick).  I had the VPN working properly with Windows 7 RTM x64 before the upgrade to ASG 7.500.

Any suggestions would be greatly appreciated.


This thread was automatically locked due to age.
Parents
  • That's from your Astaro, I meant from the Windows box that you are connecting from.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Ah!  Here's my routing table from my Windows machine (I've replaced my external IP address with ext.ip.addr.n:

    IPv4 Route Table
    ===========================================================================
    Active Routes:
    Network Destination        Netmask          Gateway       Interface  Metric
              0.0.0.0          0.0.0.0        10.24.8.1     10.24.11.104     25
            10.24.8.0    255.255.248.0         On-link      10.24.11.104    281
         10.24.11.104  255.255.255.255         On-link      10.24.11.104    281
         10.24.15.255  255.255.255.255         On-link      10.24.11.104    281
           10.242.2.1  255.255.255.255       10.242.2.5       10.242.2.6     30
           10.242.2.4  255.255.255.252         On-link        10.242.2.6    286
           10.242.2.6  255.255.255.255         On-link        10.242.2.6    286
           10.242.2.7  255.255.255.255         On-link        10.242.2.6    286
          ext.ip.addr.n  255.255.255.255        10.24.8.1     10.24.11.104     25
            127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
            127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
      127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
            224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
            224.0.0.0        240.0.0.0         On-link        10.242.2.6    286
            224.0.0.0        240.0.0.0         On-link      10.24.11.104    281
      255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      255.255.255.255  255.255.255.255         On-link        10.242.2.6    286
      255.255.255.255  255.255.255.255         On-link      10.24.11.104    281
    ===========================================================================
    Persistent Routes:
      None

    What's interesting is that while I'm connected to the SSL VPN, it never assigns a default gateway to the Astaro VPN virtual adapter in Windows.  It's just blank on the default gateway.  So weird!
Reply
  • Ah!  Here's my routing table from my Windows machine (I've replaced my external IP address with ext.ip.addr.n:

    IPv4 Route Table
    ===========================================================================
    Active Routes:
    Network Destination        Netmask          Gateway       Interface  Metric
              0.0.0.0          0.0.0.0        10.24.8.1     10.24.11.104     25
            10.24.8.0    255.255.248.0         On-link      10.24.11.104    281
         10.24.11.104  255.255.255.255         On-link      10.24.11.104    281
         10.24.15.255  255.255.255.255         On-link      10.24.11.104    281
           10.242.2.1  255.255.255.255       10.242.2.5       10.242.2.6     30
           10.242.2.4  255.255.255.252         On-link        10.242.2.6    286
           10.242.2.6  255.255.255.255         On-link        10.242.2.6    286
           10.242.2.7  255.255.255.255         On-link        10.242.2.6    286
          ext.ip.addr.n  255.255.255.255        10.24.8.1     10.24.11.104     25
            127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
            127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
      127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
            224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
            224.0.0.0        240.0.0.0         On-link        10.242.2.6    286
            224.0.0.0        240.0.0.0         On-link      10.24.11.104    281
      255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      255.255.255.255  255.255.255.255         On-link        10.242.2.6    286
      255.255.255.255  255.255.255.255         On-link      10.24.11.104    281
    ===========================================================================
    Persistent Routes:
      None

    What's interesting is that while I'm connected to the SSL VPN, it never assigns a default gateway to the Astaro VPN virtual adapter in Windows.  It's just blank on the default gateway.  So weird!
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?