Check the authentication settings on both devices.

18:16:41Z 29 (child_alert) ALERT: Couldn't authenticate the remote gateway. 18:16:41Z 29 tried 2 shared keys for 'ST11b' - 'ST13', but MAC mismatched I will need to go on-site to get access to the logs on the remote router logs since they aren't made available through the web interface or sophos central, or at least I can't find them. Should they be the same? If so, why is the sister agency not affected? The logs below are from the headoffice router. What is going on? I am using different preshared keys for each branch office. Then about 24 hours later the other branch office is dropped. I reenter the preshared key on both the head office and branch office and it starts working again. About 24 hours after I bring up the second branch office, the first one is dropped, says authentication failure. I also have another ipsec vpn to a sister agency that works fine. If you are interested in a Sophos Firewall or an appliance from another manufacturer, please feel free to contact us via phone, email or our contact form.I have two branch offices running XGS107's and a head office running XG210.

Appropriate configuration files for OpenVPN can be downloaded from the Sophos UTM or Sophos Firewall user portal. If you are using Mac OS or Linux as your operating system and want to use an SSL VPN, we recommend using OpenVPN or similar alternatives. Option to execute a login script when establishing a connectionĬhecking the availability of the remote gatewayĪutomatic failover to the next active WAN connection of the firewall if a connection failsĪutomatic synchronisation of the latest user policy when the SSL policy on the firewall is updated (when using the deployment file for deployment), as well as a manual resynchronisation of the latest policy.įile extension mapping for policy files - import a policy file into Sophos Connect by simply double-clicking the file in Windows Explorer or opening the file as an email attachment Improved support for DUO token multifactor authentication. Sophos Connect v2 is a new version of the Sophos Connect client, which now supports SSL VPN in addition to IPSec VPN and is compatible with Sophos SG and Sophos XG/XGS firewalls.īulk provisioning of SSL VPN configurations (as with IPSec) via an extended provisioning file.

For existing deployments, we recommend migrating as soon as possible. For new client deployments, we recommend using Sophos Connect. Sophos SSL VPN clients will continue to function, but new downloads will no longer be possible after 31 January 2022. Sophos has announced that the Sophos SSL VPN Client will be discontinued on 31 January 2022.

Mac sophos vpn