Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 1600 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN (PPTP) not working after Upgrade from v7 to v8

Matthias_W
Hi,

We've upgraded our ASG120 from latest version 7 to latest version 8.201.
Now VPN (PPTP) will not allow incoming connections from external users (like iPhone Users or Home Users).
From the internal network the PPTP connection works and Astaro accepts the connection.

Our Network looks like this:

Internet - Netgear Pro Safe Firewall  - Astaro Security Gateway 120 - Inernal LAN


  • Netgear -NAT enabled, VPN Passthrough, PPTP is redirected to Astaro
  • Astaro - Connection tracking helpers for PPTP is selected


With version 7 it ​​all worked! 

But now with Version 8 the Firewall Log says:
Default Drop 47 Mobilphone IP -> Astaro LAN Adress

and PPTP Log says:
proxy pptpd[10762]: GRE: Bad checksum from pppd. 

I've been looking all day for a solution. I'm thankful for every idea!


This thread was automatically locked due to age.
Parents
  • 0
     Internal Network --> PPTP ---> Any

    If the PPTP server is in "Internal (Network)", then that rule is unnecessary as the traffic will not transit the UTM.

    Try #1 in https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22065 - any luck seeing an indication in one of those?

    Cheers - Bob
    PS serkanp, one rule here is that we don't post the same message to multiple threads, so I merged the two new posts here from the other thread you created and deleted that thread.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
     Internal Network --> PPTP ---> Any

    If the PPTP server is in "Internal (Network)", then that rule is unnecessary as the traffic will not transit the UTM.

    Try #1 in https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22065 - any luck seeing an indication in one of those?

    Cheers - Bob
    PS serkanp, one rule here is that we don't post the same message to multiple threads, so I merged the two new posts here from the other thread you created and deleted that thread.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML