?
Solved

PPTP VPN is Blocked by Sohos UTM firewall

Posted on 2014-02-17
1
Medium Priority
?
2,776 Views
Last Modified: 2016-02-25
I have a functioning Sophos UTM firewall setup with the exception of not being able to successfully use the built-in windows VPN and a commercial VPN service. When I replace this firewall wall with my previous older firewall the VPN service successfully connects to the remote site. So it has the be a policy on the Sophos UTM Firewall.

The error messages are:
Windows7 VPN: Times out at Verifying User Name And Password
Windows8 VPN: Error 628 the connection was terminated ...
The Commercial VPN service:
2/17/2014 2:29:38 PM  Connecting...
2/17/2014 2:29:38 PM  PPTP connection state changed to OpenPort; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to PortOpened; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to ConnectDevice; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to DeviceConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to AllDevicesConnected; status: ok
2/17/2014 2:29:38 PM  PPTP connection state changed to Authenticate; status: ok
2/17/2014 2:29:40 PM  PPTP connection state changed to AuthNotify; status: ok
2/17/2014 2:29:59 PM  PPTP connection state changed to Disconnected; status: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  PPTP client dial completed: DotRas.RasDialException: The connection was terminated by the remote computer before it could be completed.
2/17/2014 2:29:59 PM  Failed to establish PPTP Connection.

Here's what the firewall itself reports: 15:28:14 Packet filter rule #1 TCP       192.168.XX.XXX:58747 ¿ 173.220.213.101:1723 [SYN] len=52 ttl=127 tos=0x00       srcmac=0:1c:c0:ac:f5:cc       dstmac=0:c:29:fa:15:67

Checked the following logs:
Application Control - not triggered
Intrusion Prevention - not triggered
Web Application Firewall - not triggered
Web Filtering - not triggered

I have been trying all possible changes I can think of, to no avail.
Can you help?
Johannes Banck
0
Comment
Question by:Johannes Banck
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 37

Accepted Solution

by:
bbao earned 1200 total points
ID: 39867079
FYI - The timestamps for Windows log and firewall log do not match.

However, let's assume the logs were matched, it looks like the VPN traffic was simply denied by the firewall at the most external edge therefore no more events logged at the services behind the firewall.

Just try allowing PPTP services on the external facing firewall including TCP Port 1723 and GRE (IP protocol number 47), and port forwarding PPTP to the internal VPN server behind the firewall.
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month10 days, 14 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question