XG Firewall v18 MR-3: Feedback and experiences

I will try this, although would the disconnect happen after 8 hours or the time on the DPD?

Hello Argo,

the lifetime of Phase I and Phase II keys cannot be the same. The key life for Phase I is recommended to be at least twice as long as for Phase II.
Personally, I use a lifetime 7800 seconds for Phase I and 3600 seconds for Phase II. It is important that the lifetime for Phase II is not an integer multiple of the lifetime for Phase I. In this case, the multiple is 2.166666666666667.

Try these times and I think the IPsec tunnel will be stable and functional.

The setting for Dead Peer Detection has no effect on the stability of the IPsec tunnel in this case.

Regards

alda

Good morning all ,
Since my passage v18 MR-3 I notice a drop in my flow very important
Divided by 10.
Do you have an idea ?

Hi,

please check the IPS report in the GUI. Ia the throughput reduction only on one application or all internet access?

Ian

I have no ips or Qos in my configuration

the problem and on all access

Please check the IPS in the GUI, not the rules.

Ian

Are you talking about that ?

No, I am talking about the XG GUI -> ips.

ian

Sorry but I don't know what you're talking about.
Would you have a screenshot

Please open an own thread about your issue and link it here.