XG to XG VPN

Question

Hi 
 I am just looking for some opinions on the quality/reliability of IPSEC VPN connections between two XG devices? Has anyone got experience of this and if so, are there any known issues to look out for? 
 We are currently running an XG230 at HQ connected to two Draytek Vigors at the branch offices. We are contemplating replacing these Drayteks with XG115's as the branch offices are only 10 user sites. 
 I am particularly interested in "beefing up" the IPSEC security algorithms in use since the Drayteks are quite limited and don't support the latest settings. However the most important factor is reliability, we have had a fairly reliable run with the Drayteks. I have seen plenty of weird things happening with IPSEC before using other vendors/devices so I am keen to hear first hand how well this setup works. 
 Thanks

Deo Angelo Lim · Accepted Answer

Hi, 
 Good day! 
 
 XG to XG VPN, I would suggest to use the default encryption method which is the DefaultBranchOffice and DefaultHeadOffice Policy. On our clients end as we deploy IPSEC VPN. As long as the internet connection is stable it is secured and It will be depending on the firewall rule as well for the resources access. 
 
 Warm Regards, 
 
 Deo Angelo P. Lim | Technical Manager 
 M +63 917 720 2755 
 E deo@armlinkccs.com 
 Skype : deoangelo.lim

Deo Angelo Lim · Answer

Hi Sir Ben, 
 
 Good day! 
 
 I could also suggest a Traffic Shaping policy for VPN and make the priority as a highest priority this will make the VPN connection better but if there is/are no VPN requests/traffic the bandwidth will be utilized on other services. 
 Warm Regards,