IPSEC VPNs keep logging SIX terminate/established log entries about every 40 minutes and send the notification ALERT 6 messages IPsec tunnel is down/up at the same time about every 40 minutes (XG18.0.3)

Question

I keep getting notification ALERT messages that IPsec tunnel is up and down about every 40 minutes when i still have connection. 
 I'm using Sophos XG 125 and i do not have this issue on XG V17.5.14. 
 It happen after i upgrade to XG V18.0.3. And it happen the same after i do fresh install of XG V18.0.3 to my XG 125. 
 I think my case is similar to the below link case but i cannot find any update fix. 
 https://community.sophos.com/xg-firewall/f/discussions/111951/ipsec-vpns-keep-logging-five-terminate-established-log-entries-every-hour-or-so/405013 
 
 Can some one help me? Is this still a bug? 
 The below is the log view. I cannot find this in CLI log.

LuCar Toni · Answer

XG moves to a new noticiation system. As the tunnel basically rekey all the time, there seems to be a race condition, that this new system assumes, the tunnel is rebuild (which is a false-positive). 
 You can increase the Key life time to decrease the amount of notifications. This will be looked for in the upcoming version (i do not have a version).

IPSEC VPNs keep logging SIX terminate/established log entries about every 40 minutes and send the notification ALERT 6 messages IPsec tunnel is down/up at the same time about every 40 minutes (XG18.0.3)

Top Replies