Solved

PPTP VPN is Blocked by Sohos UTM firewall

Posted on 2014-02-17
1
2,569 Views
Last Modified: 2016-02-25
I have a functioning Sophos UTM firewall setup with the exception of not being able to successfully use the built-in windows VPN and a commercial VPN service. When I replace this firewall wall with my previous older firewall the VPN service successfully connects to the remote site. So it has the be a policy on the Sophos UTM Firewall.

The error messages are:
Windows7 VPN: Times out at Verifying User Name And Password
Windows8 VPN: Error 628 the connection was terminated ...
The Commercial VPN service:
2/17/2014 2:29:38 PM  Connecting...
2/17/2014 2:29:38 PM  PPTP connection state changed to OpenPort; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to PortOpened; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to ConnectDevice; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to DeviceConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to AllDevicesConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to Authenticate; status: ok
2/17/2014 2:29:40 PM  PPTP connection state changed to AuthNotify; status: ok
2/17/2014 2:29:59 PM  PPTP connection state changed to Disconnected; status: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  PPTP client dial completed: DotRas.RasDialException: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  Failed to establish PPTP Connection.

Here's what the firewall itself reports: 15:28:14 Packet filter rule #1 TCP       192.168.XX.XXX:58747 ¿ 173.220.213.101:1723 [SYN] len=52 ttl=127 tos=0x00       srcmac=0:1c:c0:ac:f5:cc       dstmac=0:c:29:fa:15:67

Checked the following logs:
Application Control - not triggered
Intrusion Prevention - not triggered
Web Application Firewall - not triggered
Web Filtering - not triggered

I have been trying all possible changes I can think of, to no avail.
Can you help?
Johannes Banck
0
Comment
Question by:Johannes Banck
1 Comment
 
LVL 37

Accepted Solution

by:
bbao earned 400 total points
ID: 39867079
FYI - The timestamps for Windows log and firewall log do not match.

However, let's assume the logs were matched, it looks like the VPN traffic was simply denied by the firewall at the most external edge therefore no more events logged at the services behind the firewall.

Just try allowing PPTP services on the external facing firewall including TCP Port 1723 and GRE (IP protocol number 47), and port forwarding PPTP to the internal VPN server behind the firewall.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question