Could be - I know there is a problem with replies going out pver the same interfaces they come in on. I'm pretty excited about 2.2 once the bugs are worked out.  A well threaded pfsense will make a huge difference.

Pretty sure that's this scenario. https://redmine.pfsense.org/issues/3894

Good to know.

Good idea.  Abit trickier to configure though.

Thanks for the reply. I did not change those settings as they did not make sense to me as I am no LDAP guru. I have now changed the settings to User naming attribute = samAccountName Group naming attribute = cn Group member attribute = memberOf and it works Thanks!!!

Maybe you only have to allow traffic on the right ports on the EC2 instance… :P

staff Set up branches of the network by adding another branch on Remote Network IPv4 / s field Ie was as follows, In branch A, put the remote network 192.168.1.0/24 Matrix and more affiliate network 192.168.2.0/24 B Now when I am in the branch and request ping from B affiliate network until it reaches the address of the VPN tunnel on the side of the Matrix, and after that he can not forward, What configuration is missing in the matrix or at the branch? Or am I doing something wrong? Thank you!

If you made two servers, one for each WAN, ensure they have unique tunnel network settings but have the same certs/TLS keys/etc. It's easier to make one server, bind it to Localhost, and then port forward from each WAN to localhost. That way the same server can handle both WANs.

I have found the problem! When I use hmac OpenVPN stops/crashes. When I do not use it everything runs smooth. Also tried using hmac without hardware encryption but didn't work also. I'm a bit disappointed that OpenVPN crashes when using hmac :( Does anyone have an idea on how to solve this?

killing two birds with one stone? Smart…

Glad its working.

Don't know but you can contact with Astrill support team hope they can help you

Just realized how to fix this, when i saw the Proxy server's Interface list. i added another interface for openvpn changed openvpn's listening interface from WAN to any multiselect the interfaces in squid proxy server set to transparent mode changed HAVP server to transparent mode. Initially my VPN broke but that was due to the problem of incorrect listening interface. after changing the interface from wan to any in openvpn server it was ok. thanks