Sophos xg refused to connect. Depending on your internet connection type, if it fails it can cause the XG to be unresponsive. Sep 14, 2022 · What ips do you have enabled when the failures occur. • Third, that there is no DNAT rule configured on port 80, as this will supersede the inbound requests Firewall can't be reached on Port 80 - but my understanding is that port 80 is only opened Feb 16, 2022 · Since, for some reason, I'm not being able to access my Sophos XGS appliance trough a webadmin or ssh conection, I'm trying to access the device with a serial connection with a console cable. If you restart your device and you still can't connect, contact your firewall Nov 7, 2024 · Sophos says: There are three main things to check: • First, that the firewall port can be reached on port 80. If correct, follow the steps in the CLI section to connect to the Sophos Firewall. No restrictions were imposed. 0 Mr04 soon. Loged in the Web interface and configured the LAN and WAN Port successful. I have access to the internet, can surf different Websites. Based on this, I'm not sure where to go next in order to resolve this situation. I checked the events and nothing shows up except the attached screen capture Sophos support really slow in responding and not a good impact for a new sophos admin like me. packet trace and ping show traffic gets to the firewall. Failed to write to pipe If you can't connect, follow these instructions. 16. . Sep 4, 2024 · To troubleshoot site-to-site IPsec VPN connections and failover groups, you can check the logs, IPsec profiles, and connection properties. There is open and complete internet access. x version with an eye to move to 18. all other traffic is fine on this network. The problem is: I can't register my home user license via "Administration" --> "Licensing" . Tried adding URL to the exception list so it shouldn't be scanned, and added the URL's to skip SSL inspection all without any luck. Second: XG only allow the admin user on SSH, not any user with admin privileges. Users are authenticated via AD, the Sophos Connect Client and Config file was downloaded from the Sophos VPN Portal. I can install the client from the user portal just fine, but when I try to connect, it is stuck in a loop. Trying a couple more times resulted in the login page displaying a Captcha and slowing down. Kindly suggest if anyone solved this issue Thanks, KS Ghosh Nov 21, 2019 · Hello, I hope this is the right topic. 3 fails to connect to Sophos XG when the server certificate authority uses a weak signature algorithm like SHA1. 1. Connect to XG using CLi and select option 2 and then option 4. On my web browser says ERR_CONNECTION REFUSED. 3 MR-3 but for some reason everyday the customer has to reboot the firewall and connection will be restored. Sep 28, 2023 · Remedy: Import a new configuration file into the Sophos Connect client and then reconnect. Every Oct 12, 2021 · I was recently testing remote SSL VPN access and connected successfully from a Mac using OpenVPN. The FritzBox still serves as cable modem and An issue was discovered where the Sophos Connect Client release 2. iso and got a license (per email). 4:4444 I can connect via a computer on teh 10. Mar 27, 2024 · We are having an Issue with the VPN Connection of a single Client. 16:4444. This is the setup: We have an XG105 that's situated behind a FritzBox router, which was originally used before we installed the XG. Nov 20, 2020 · Hi, We recently deployed a brand new Sophos XG115W with the latest firmware SFOS 18. May 31, 2025 · Dear Team, I am experiencing an issue where some packets are being dropped by the Sophos Firewall, with the log viewer showing the message: "Could not associate packets to any connection. May 10, 2019 · If you are unable to load any pages, check your computer’s network connection. Let us know. ian XGS118 - v21. Jan 3, 2022 · "Service 'strongSwan IPsec service' (StrongSwan) failed to start. If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web. I'm trying to set up remote access to the network via the SSL VPN client. May 20, 2024 · Resolution Make sure Sophos Firewall is correctly claimed… does your ISP/rSP have open connections, maybe they run CGNAT which is blocking your access? If a post solves your question please use the 'Verify Answer' button. I wondered if the XGS Bart, it seems strange that your certificate is expired. This is the first time our Jan 23, 2021 · Both gateways connect to our HA Sophos Xg's, currently running the last 17. Jul 22, 2023 · Hello Sophos User, I downloaded the SFOS Home user version SW-19. Resolution Make sure Sophos Firewall is correctly claimed… Jun 29, 2021 · First of all, disable HTTPS and SSH on WAN. Oct 7, 2025 · Re-establish the connection. Nov 7, 2024 · Sophos says: There are three main things to check: • First, that the firewall port can be reached on port 80. One peer tries to start the connection to the other, giving the proposal for the VPN. I was able to then go to the admin login web page, and when I entered the login and password -- from a password manager, so no possibility of typo -- it said that the login failed. If your firewall administrator hasn't sent you the file, go to the user portal and download it. Where to try to negotiate the IPsec, probably a public IP address or a DNS. Only a single Client is affected all other Users have no issues. This could be due to a problem with your internet connection or between your firewall and the server. • Second, that the domain in the certificate request resolves the interface selected. 10. 1_MR-1-278. Feb 25, 2025 · To force the internet traffic through the SSL VPN adapter, verify the endpoints' routing table and prioritize the SSL VPN adapter through its metric. Product and Environment Sophos Firewall - All supported versions Symptom Can't connect to the registration service There seems to be an issue connecting to the license server. If the Sophos Connect dashboard won't open, follow these instructions. Sep 27, 2023 · Hi Alain, Thank you for reaching out to Sophos Community. If this doesn't work, restart your device and try again. Kindly check the following KB's with the same queries, which might assist. IPsec VPN and Configuration IPsec encrypts and authenticates one or multiple packets, thus allowing secure and secret communication between two trusted points over an untrusted network. Sophos Connect - Does the User Portal have to be on the WAN interface for it to work? Sophos Connect and delivery of configuration via User Portal How to Access SophosXGFirewall admin and user portal from WAN ? I am trying to connect to a Sophos XG L2TP VPN from an android device however the VPN will not connect. Verify the IP and port through which you are accessing the firewall is correct. " My questions are specifically related to this message: What causes this message to appear in the logs? Why are some packets dropped even though a DNAT rule is properly configured and working for most traffic Establishing an SSL connection to Sophos Firewall using the OpenSSL client shows that the legacy web server uses RC4-MD5 cipher as the highest cipher it offers. If you restart your device and you still can't connect, contact your firewall administrator. 0. If you need further assistance, contact Sophos Support. Installation on a Sophos XG106w successful done. Otherwise, try to access the device on the correct IP and port. I have connected to the sophos console and run the command show vpn L2TP-logs which results in the following: May 20, 2024 · Hi Derry Wang1 , Thank you for reaching out to the community, you can refer - Troubleshoot error: Can't connect to the registration service . 3. Sep 29, 2022 · getting "connection refused" from the HTTPS//10. 0/24 network is there a rule that i can add to have it talk to the 10. Verify that you have sufficient privileges to start system services " getting this message when trying to start Sophos connect dialer in windows 10 with Administrator privileges. Overview This recommended read consolidates troubleshooting IPsec Site-site VPN and the steps and fixes for the issues encountered using the Sophos Firewall IPsec VPN. When starting the VPN Connection it loads forever until it eventually times out. Check the connectivity to the Sophos Firewall. Re-establish the connection. I have tried to run " net start strongswan " command to start it manually but failed. 0 XG115 converted to software licence v21. 0 If a post solves your question please use the 'Verify Answer' button. just the admin web page shows connection refused. I have made a lot of troubleshooting, I Dec 13, 2024 · Issue The Sophos Firewall registration fails. 5. Oct 7, 2025 · General troubleshooting Oct 7, 2025 You can troubleshoot issues that don't appear on the events page. IPsec VPN IPsec VPN How-to Articles Ipsec Aug 12, 2025 · This guide provides information about how to troubleshoot Sophos Connect issues. Otherwise, go to the user portal to download the ovpn file. You can also move to SSH key based authentication. As the latest version of Sophos Firewall removes this cipher from its cipher suite on WAF, the legacy web server and Sophos Firewall were not able to agree on a supported cipher. 0 network. We got this message from license server: undefined Connected to internet Aug 20, 2023 · At some point Ubisoft Connect stopped working, and have tried anything I can think of as it works fine if I bypassed the firewall by using a mobile connection. Feb 5, 2020 · Hi After install, I'm not able to open the url htts://172. nu q6v hmvdw mzwv xu4n6 kbzli twianxq rszdln ibtdx rkvzcit