IPsec Connection

Hello Tharindu,

Thank you for contacting the Sophos Community!

Yes the XG Supports IPsec connection. Sha is basically HMAC.

Here are some logs that shows:

2020-09-20 00:11:26 29[CFG] <Azure_to_XG-1|3> selected proposal: ESP:AES_CBC_256/HMAC_SHA2_512_256/NO_EXT_SEQ

Regards,

Hi Emmanuel,

Thank you for your support,

below is the phase 2 details that the customer send to me

you can see the IPSEC Encryption is HMAC, so what SHA Profile is needed here?

pardon for my English.

Hello Tharindu,

Thank you for the follow-up!

They are providing you with incorrect information as HMAC is not used for Encryption but AES is, so please clarify with whoever provided you with this the requirements for the tunnel.

Regards,

Hello Tharindu,

Thank you for the follow-up!

They are providing you with incorrect information as HMAC is not used for Encryption but AES is, so please clarify with whoever provided you with this the requirements for the tunnel.

Regards,