Solved

PPTP VPN is Blocked by Sohos UTM firewall

Posted on 2014-02-17
1
2,524 Views
Last Modified: 2016-02-25
I have a functioning Sophos UTM firewall setup with the exception of not being able to successfully use the built-in windows VPN and a commercial VPN service. When I replace this firewall wall with my previous older firewall the VPN service successfully connects to the remote site. So it has the be a policy on the Sophos UTM Firewall.

The error messages are:
Windows7 VPN: Times out at Verifying User Name And Password
Windows8 VPN: Error 628 the connection was terminated ...
The Commercial VPN service:
2/17/2014 2:29:38 PM  Connecting...
2/17/2014 2:29:38 PM  PPTP connection state changed to OpenPort; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to PortOpened; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to ConnectDevice; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to DeviceConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to AllDevicesConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to Authenticate; status: ok
2/17/2014 2:29:40 PM  PPTP connection state changed to AuthNotify; status: ok
2/17/2014 2:29:59 PM  PPTP connection state changed to Disconnected; status: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  PPTP client dial completed: DotRas.RasDialException: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  Failed to establish PPTP Connection.

Here's what the firewall itself reports: 15:28:14 Packet filter rule #1 TCP       192.168.XX.XXX:58747 ¿ 173.220.213.101:1723 [SYN] len=52 ttl=127 tos=0x00       srcmac=0:1c:c0:ac:f5:cc       dstmac=0:c:29:fa:15:67

Checked the following logs:
Application Control - not triggered
Intrusion Prevention - not triggered
Web Application Firewall - not triggered
Web Filtering - not triggered

I have been trying all possible changes I can think of, to no avail.
Can you help?
Johannes Banck
0
Comment
Question by:Johannes Banck
1 Comment
 
LVL 37

Accepted Solution

by:
Bing CISM / CISSP earned 400 total points
ID: 39867079
FYI - The timestamps for Windows log and firewall log do not match.

However, let's assume the logs were matched, it looks like the VPN traffic was simply denied by the firewall at the most external edge therefore no more events logged at the services behind the firewall.

Just try allowing PPTP services on the external facing firewall including TCP Port 1723 and GRE (IP protocol number 47), and port forwarding PPTP to the internal VPN server behind the firewall.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

937 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

1 Experts available now in Live!

Get 1:1 Help Now