Solved

PPTP VPN is Blocked by Sohos UTM firewall

Posted on 2014-02-17
1
2,466 Views
Last Modified: 2016-02-25
I have a functioning Sophos UTM firewall setup with the exception of not being able to successfully use the built-in windows VPN and a commercial VPN service. When I replace this firewall wall with my previous older firewall the VPN service successfully connects to the remote site. So it has the be a policy on the Sophos UTM Firewall.

The error messages are:
Windows7 VPN: Times out at Verifying User Name And Password
Windows8 VPN: Error 628 the connection was terminated ...
The Commercial VPN service:
2/17/2014 2:29:38 PM  Connecting...
2/17/2014 2:29:38 PM  PPTP connection state changed to OpenPort; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to PortOpened; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to ConnectDevice; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to DeviceConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to AllDevicesConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to Authenticate; status: ok
2/17/2014 2:29:40 PM  PPTP connection state changed to AuthNotify; status: ok
2/17/2014 2:29:59 PM  PPTP connection state changed to Disconnected; status: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  PPTP client dial completed: DotRas.RasDialException: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  Failed to establish PPTP Connection.

Here's what the firewall itself reports: 15:28:14 Packet filter rule #1 TCP       192.168.XX.XXX:58747 ¿ 173.220.213.101:1723 [SYN] len=52 ttl=127 tos=0x00       srcmac=0:1c:c0:ac:f5:cc       dstmac=0:c:29:fa:15:67

Checked the following logs:
Application Control - not triggered
Intrusion Prevention - not triggered
Web Application Firewall - not triggered
Web Filtering - not triggered

I have been trying all possible changes I can think of, to no avail.
Can you help?
Johannes Banck
0
Comment
Question by:Johannes Banck
1 Comment
 
LVL 37

Accepted Solution

by:
Bing CISM / CISSP earned 400 total points
ID: 39867079
FYI - The timestamps for Windows log and firewall log do not match.

However, let's assume the logs were matched, it looks like the VPN traffic was simply denied by the firewall at the most external edge therefore no more events logged at the services behind the firewall.

Just try allowing PPTP services on the external facing firewall including TCP Port 1723 and GRE (IP protocol number 47), and port forwarding PPTP to the internal VPN server behind the firewall.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

I've had to do a bit of research to setup my VPN connection so that Clients can access Windows Server 2008 network shares.  I have a Cisco ASA 5510 firewall.  I found an article which was extremely useful: It had a solution if you use ASDM to config…
Let’s list some of the technologies that enable smooth teleworking. 
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now