[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

PPTP VPN is Blocked by Sohos UTM firewall

Posted on 2014-02-17
1
Medium Priority
?
2,836 Views
Last Modified: 2016-02-25
I have a functioning Sophos UTM firewall setup with the exception of not being able to successfully use the built-in windows VPN and a commercial VPN service. When I replace this firewall wall with my previous older firewall the VPN service successfully connects to the remote site. So it has the be a policy on the Sophos UTM Firewall.

The error messages are:
Windows7 VPN: Times out at Verifying User Name And Password
Windows8 VPN: Error 628 the connection was terminated ...
The Commercial VPN service:
2/17/2014 2:29:38 PM  Connecting...
2/17/2014 2:29:38 PM  PPTP connection state changed to OpenPort; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to PortOpened; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to ConnectDevice; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to DeviceConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to AllDevicesConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to Authenticate; status: ok
2/17/2014 2:29:40 PM  PPTP connection state changed to AuthNotify; status: ok
2/17/2014 2:29:59 PM  PPTP connection state changed to Disconnected; status: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  PPTP client dial completed: DotRas.RasDialException: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  Failed to establish PPTP Connection.

Here's what the firewall itself reports: 15:28:14 Packet filter rule #1 TCP       192.168.XX.XXX:58747 ¿ 173.220.213.101:1723 [SYN] len=52 ttl=127 tos=0x00       srcmac=0:1c:c0:ac:f5:cc       dstmac=0:c:29:fa:15:67

Checked the following logs:
Application Control - not triggered
Intrusion Prevention - not triggered
Web Application Firewall - not triggered
Web Filtering - not triggered

I have been trying all possible changes I can think of, to no avail.
Can you help?
Johannes Banck
0
Comment
Question by:Johannes Banck
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 37

Accepted Solution

by:
bbao earned 1200 total points
ID: 39867079
FYI - The timestamps for Windows log and firewall log do not match.

However, let's assume the logs were matched, it looks like the VPN traffic was simply denied by the firewall at the most external edge therefore no more events logged at the services behind the firewall.

Just try allowing PPTP services on the external facing firewall including TCP Port 1723 and GRE (IP protocol number 47), and port forwarding PPTP to the internal VPN server behind the firewall.
0

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
Let’s list some of the technologies that enable smooth teleworking. 
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question