Hi jt6254, You can try adding a route allowing network traffic from the computer you are connecting from (it's IP address/range) to travel outside of the VPN connection: https://www.sparklabs.com/support/kb/article/routing-traffic-for-websites-applications/#specifying-traffic-to-go-through-the-norma...

Hi nowala, You should make sure that the "comp-lzo" and "compression" commands are not used anywhere in the server's configuration. The "comp-lzo no" still enables compression framing support: instead make sure the command is removed. You should also make sure the serve...

Hi KR15T0, The configuration file specifies to redirect all IPv6 traffic: redirect-gateway def1 ipv6 This corresponds with the All Traffic option set to "Send all traffic over VPN connection" (which routes both IPv4 and IPv6). You'll want to change this to "Send all IPv4 traffic over ...

Hi KR15T0,

Can you please post the details listed in the following article and we can take a closer look for you:
https://www.sparklabs.com/support/kb/ar ... ort-staff/

Cheers,
James

Hi Sebastian, Setting tls-version-max and tls-version-min should be sufficient to force the TLS version used by OpenVPN, however it won't necessarily cause OpenSSL to use ciphers/hashes in that TLS suite version it considers insecure. TLS 1.2 also optionally supports RSA PSS if the client TLS sessio...

Hi Osleff,

You can use the approach listed in the following post:
viewtopic.php?p=8922#p8924

Cheers,
James

Hi KR15T0, The "Block IPv6 traffic while connected to IPv4-only VPN connections" option only blocks IPv6 traffic if the VPN connection has no IPv6 routing configured. A common misunderstanding of the feature is thinking that it always blocks IPv6, which isn't the case: if your VPN connecti...

Hi mihkel, It sounds likely you have your certificate in a slot on your token that has the CKA_ALWAYS_AUTHENTICATE flag set. OpenVPN 2.6 (well technically pkcs11-helper on macOS) properly respects this flag, while older versions would not. When OpenVPN needs to sign data using your token two operati...

Hi mplarumbe, It looks likely the OpenVPN server is rejecting your connection attempt. It may be significantly out-of-date, or using an incomplete OpenVPN protocol implementation (aka Mikrotik routers). Try adjusting the compatibility setting as described in the following article: https://www.sparkl...

Hi tux84, Viscosity 1.11 provides a new compatibility setting that will allow it to connect to servers running legacy versions of OpenVPN. Please run through the steps listed in the following article, which should get you connecting again: https://www.sparklabs.com/support/kb/article/migrating-from-...