Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 1 subscriber
  • Views 3448 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Newbie with PPTP VPN issues

ccgsd
Hello everyone I am very new to Sophos. I have started to config my firewall but I am unable to get VPN to work.

If I use a user local to sophos I can establish a connection to Sophos but I can't connect to our local network. 

If I use a user with Active Directory it does not establish authentication.

Am I missing something with the config?


This thread was automatically locked due to age.
Parents
  • 0
    Hi ccgsd, 

    Sophos UTM doesn't support Active Directory authentication with PPTP VPN, only local or RADIUS.
    If you want to authenticate users with their AD accounts you have to install and configure RADIUS services inside your network, define RADIUS as Authentication server object in UTM and change authentication type in PPTP VPN settings.

    You will also need to manually create a firewall rule VPN Pool (PPTP) -> ANY -> Internal (network).
  • 0 in reply to vilic
    Your recommendations worked, I thank you for that. 

    Now I can't ping by hostname. I get responses back by IP address.


    Hi ccgsd, 

    Sophos UTM doesn't support Active Directory authentication with PPTP VPN, only local or RADIUS.
    If you want to authenticate users with their AD accounts you have to install and configure RADIUS services inside your network, define RADIUS as Authentication server object in UTM and change authentication type in PPTP VPN settings.

    You will also need to manually create a firewall rule VPN Pool (PPTP) -> ANY -> Internal (network).
  • 0 in reply to ccgsd
    Now I can't ping by hostname. I get responses back by IP address.


    In the Remote Access -> Advanced section, set DNS IP and Domain name FQDN.
  • 0 in reply to vilic
    In the Remote Access -> Advanced section, set DNS IP and Domain name FQDN.


    Yeah I already had that set.
Reply Children
No Data
Unfiltered HTML