Had SFOS v17 MR5 running with 5 IPSEC tunnels, a disaster!
Support was looking at it for several days, no responses, then MR6 came and they wrote me promptly to install...but the issues reoccured, now I got 3 mails stating that their senor dev team is looking at it, but I lost my patience, and i had to move on with UTM, now all tunnels are stable.
MR6 has been put behind UTM for futher testing.
I know the dev. guys are doing their finest, but it's difficult when customers are being told the XG it the way to go, and i keep saying the opposite! - XG will make it eventually, but no customer can be a "beta" tester [:D]
Waiting for a "full backed" solution, as it look's promising!
Just to follow up. Since MR-6 all our devices connected via ethernet hand off so far(knock on wood) have not had any IPSEC issues since applying MR-5 with ipsec fix or with MR-6. The one device we have on a DSL modem with MR-6 connected via PPPoE had an issue getting VPN re-connected after the PPPoE session went down and then came back up briefly this morning. (This has not happened since before MR-5.)
MR6 have decreased a 100% CPU use I was having with an XG 105 since MR2, it is not the same that it used to be, but at least the firewall now is more responsive and SMNP stopped disconecting all the time....
I'm hoping 17.1 fixes all the IPSEC issues. We're still on v16.5 MR9 and seems to be working well-enough for us but all the horror stories of v17 are preventing me from upgrading at this time.
