This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

issues

Hi Community,

I got an issues with our UTM 220 and SSL Remote Access.
Generelly it is working fine for alle but now I have one user in China which have problems to connect via SSL Client to our UTM in Germany.

I have copied the Client log and the UTM SSL Log with debug mode.

The connection always restarts. I don´t know what happens can you help me?
Port 443 is used and not blocked by the private network.
[:S]

greets
Philipp

This thread was automatically locked due to age.

0 Scott_Klassen over 11 years ago

Can you confirm that China's Great Firewall (Chinese government level firewall that all traffic to and from China must go through) is not coming into play here? I've seen it happen a few times.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 UrsWeiss over 11 years ago

I'm almost sure that they will intercept everything on port 443.

One option would be to change the port. But disadvantages would be that you have to update all configs, and ports other then standard ports may are blocked on hotel networks f.ex.

We had an Astaro in China for some time doing an IPsec VPN. That worked fine all the time. So maybe you should give IPsec a try. But it was some years ago already, so i don't know if something may has changed in meantime.
Cancel
Vote Up 0 Vote Down

Cancel
0 Philipp_IT over 11 years ago

Hey

I solved it now with an IPSEC Connection to our router in China. So I don´t need a solution by Sophos UTM.

But I´m very interested to understand the attached log. Can somebody tell me what the log says?

greets
Philipp
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi, the client log shows it's getting RST packets, presumably from the Great Firewall.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

BTW, did you try IPSEC directly from client to Germany?

I'll be in China this fall; used SSL VPN last time [:(]

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Philipp_IT over 10 years ago

Hey
sorry havent time yet user was busy to get ready for work :-/
I put it on the to do list.
Cancel
Vote Up 0 Vote Down

Cancel