This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Newbie with PPTP VPN issues

Hello everyone I am very new to Sophos. I have started to config my firewall but I am unable to get VPN to work.

If I use a user local to sophos I can establish a connection to Sophos but I can't connect to our local network.

If I use a user with Active Directory it does not establish authentication.

Am I missing something with the config?

This thread was automatically locked due to age.

0 BarryG over 10 years ago

Hi,

Did you check the "Auto Firewall Rules" option in the VPN settings, or create manual rules?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 10 years ago

Hi ccgsd,

Sophos UTM doesn't support Active Directory authentication with PPTP VPN, only local or RADIUS.
If you want to authenticate users with their AD accounts you have to install and configure RADIUS services inside your network, define RADIUS as Authentication server object in UTM and change authentication type in PPTP VPN settings.

You will also need to manually create a firewall rule VPN Pool (PPTP) -> ANY -> Internal (network).
Cancel
Vote Up 0 Vote Down

Cancel
0 ccgsd over 10 years ago in reply to vilic

Your recommendations worked, I thank you for that.

Now I can't ping by hostname. I get responses back by IP address.

Hi ccgsd,

Sophos UTM doesn't support Active Directory authentication with PPTP VPN, only local or RADIUS.
If you want to authenticate users with their AD accounts you have to install and configure RADIUS services inside your network, define RADIUS as Authentication server object in UTM and change authentication type in PPTP VPN settings.

You will also need to manually create a firewall rule VPN Pool (PPTP) -> ANY -> Internal (network).
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 10 years ago in reply to ccgsd

Now I can't ping by hostname. I get responses back by IP address.

In the Remote Access -> Advanced section, set DNS IP and Domain name FQDN.
Cancel
Vote Up 0 Vote Down

Cancel
0 ccgsd over 10 years ago in reply to vilic

In the Remote Access -> Advanced section, set DNS IP and Domain name FQDN.

Yeah I already had that set.
Cancel
Vote Up 0 Vote Down

Cancel
0 ccgsd over 10 years ago

SO i can ping the fully qualified host name but not just the machine name.
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 10 years ago

From the UTM help:
For PPTP and L2TP over IPsec the domain name cannot be distributed automatically, but needs to be configured on the client side.

Look at the attached screenshot.
Cancel
Vote Up 0 Vote Down

Cancel
0 ccgsd over 10 years ago in reply to vilic

From the UTM help:

Look at the attached screenshot.

Is there anything that can be done for IOS devices?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

Probably the same sort of setting in IOS device VPN settings. Take a look through the available options on your device and look through the Apple knowledgebase/documentation.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel