Found this thread as I was pulling my hair out trying to find out why OpenVPN 3.4 wasn't working with my Sophos XG. I saw similar error messages in the logs which is why I am here.
What correct this issue for me was deleting the profile off the Android phone that was using hardcoded IP addresses for the VPN concentrator (Sophos) and switching the configuration on the Sophos side to "override hostname" and putting in a FQDN that resolves to the IP of the gateway.
The main symptom that occurred was I could easily establish an OVPN connection to sophos, and I could connect to local resources, but any hairpinning of traffic back to the internet via the Sophos XG acting as a gateway was failing for HTTP/S. I confirmed I was able to TCP traceroute using HE NetTools, so I know traffic was routing, and the Sophos log files / policy test all showed no issues, but HTTP/S traffic was blocked.
What correct this issue for me was deleting the profile off the Android phone that was using hardcoded IP addresses for the VPN concentrator (Sophos) and switching the configuration on the Sophos side to "override hostname" and putting in a FQDN that resolves to the IP of the gateway.
The main symptom that occurred was I could easily establish an OVPN connection to sophos, and I could connect to local resources, but any hairpinning of traffic back to the internet via the Sophos XG acting as a gateway was failing for HTTP/S. I confirmed I was able to TCP traceroute using HE NetTools, so I know traffic was routing, and the Sophos log files / policy test all showed no issues, but HTTP/S traffic was blocked.
Statistics: Posted by dohabandit — Mon Jul 08, 2024 12:57 am
