Here I have a concern about Sophos XG/Strongswan VPN architecture that If you had disabled the Remote ID then why it is still looking remote ID must be matched if you had configured Remote gateway as DYDNS address of the remote device?
Maybe it is part of the security but not sure. There are no such clear documents on the Sophos website for the same.
Visit my blog post:
https://deepuinfo.blogspot.com/2019/07/sophos-xg-vpn-issue-with-fortigate-and.html
Ignore any Typo.
This thread was automatically locked due to age.