Switch off Alerting of IPSec Tunnel up/down

Question

Hello, 
 I get a lot of messages in Sophos Centrol from our Firewall regarding IPSec Tunnels that are shutdown/restablished a couple of times per day. 
 How can these messages be supressed? I looked on the firewall and also in Central. Regards, BeEf

LuCar Toni · Answer

You can stop the Email Alert in Central itself (not sending a message to you). 
 There is currently a investigation, why those Alerts appear, if they are F-P. 
 https://www.reddit.com/r/sophos/comments/m8vwx6/ikev2_tunnel_drops_at_every_phase_1_rekey/

rfcat_vk · Answer

Hi, 
 in systems services -> notification list you can disable notifications for VPN, which are off by default.

Ian 
 Lucar beat me.

LuCar Toni · Answer

If the number is related to the Key Life time of your ipsec tunnel, it is likely, you are affected by the same issue. Its easy to see the relation, the keylifetime is most likely 8 hours or less. If the alert occurs roughly every 8 hours, it looks like a F-P. And the workarounds are written in the Reddit as well - Move to PSK with 31 digits.

Switch off Alerting of IPSec Tunnel up/down

Top Replies