Sophos Firewall

Discussions Upgrading from V16.05.MR9 to v17.0.6 MR6 and IPSEC Site to site

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 7 replies
Subscribers 30 subscribers
Views 7396 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Upgrading from V16.05.MR9 to v17.0.6 MR6 and IPSEC Site to site

lukg over 7 years ago

We are planning to upgrade from V16.05.MR9 to v17.0.6 MR6.

Is it required to re-create IPSEC VPN ikev1 settings after upgrade or should in-place upgrade work ?

This thread was automatically locked due to age.

Parents

0 John Henry Vindas Carballo over 7 years ago

Hello lukg,

I did upgrade an appliance from v16.05 to v17 and the only issue I've found on the IPSec configuration was that the DH group in phase 1 changed after the update was applied.

I just had to select the correct option again and that was it.

Best regards.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 John Henry Vindas Carballo over 7 years ago

Hello lukg,

I did upgrade an appliance from v16.05 to v17 and the only issue I've found on the IPSec configuration was that the DH group in phase 1 changed after the update was applied.

I just had to select the correct option again and that was it.

Best regards.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Big_Buck over 7 years ago in reply to John Henry Vindas Carballo

It is well known DH group standard settings are not optimal with. At least in v17 earlier than MR4 ... That said, if one as a simple setup, the simpler is to scrap and setup VPN from scratch.
Cancel
Vote Up 0 Vote Down

Cancel