Sophos Connect Client fail because IKE UDP Port seems to be blocked

Restart the StrongSwan service and see if the helps with your issue.

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/110323/restart-application-and-url-filtering-services-from-cli

//Rickard

Restarting this service will make my IPSec site-to-site VPN to disconnect?

Yes for a short period of time, but it will get back online again when its restarted.

//Rickard

Glad to be of service.

//Rickard

Hi Rod,

Please advise on how to restart the service, is it by logging to FW via putty

Im pretty new to Sophos XG

Appreciate any help

Thanks

Raj

Hi Raj,
you do not need third party software, you log into the GUI, the start a console sesssion.

ian

Hi Ian,

Thanks for your reply , did try following command on console - service strongswan:restart -ds nosync

But no luck

Capturing on host with wireshark

Source IP 172.16.16.25 Destination IP 192.168.1.150

UDP Src Port 62224 Dst Port 500

Payload Vendor ID (13) - RFC 3706 DPD ( Dead Peer Detection )

Not sure what the above means thou  :(

Appreciate any help

Regards

Raj