Sophos XG - Ipsec PSK

Question

Hello, 
 
 i hope you can help me: 
 
 I have a lot of ipsec-connections. 
 
 When i change the PSK from connection1 , all other connection going offline. 
 
 Is that a bug? Must Have all ipsec-connection the same PSK? 
 
 That meens: when i change the PSK from connection1, all other PSKs from the other connection will changed also?

Ben@Network · Answer

If you want to use PSKs, you could configure a DynDNS name on the 2nd firewall and use this name on the IPSec configuration instead of &sbquo;*&lsquo;.

FormerMember · Answer

Hi Oliver Wamsler1 , 
 Thank you for reaching out to the Community! 
 If you've multiple IPsec connections with "*" in remote gateway, then changing the preshared key for one connection will update the preshared key to all the connections with "*" in the remote gateway. This is expected behavior, and to resolve this issue configure remote and local ID or use certificate authentication. 
 Thanks,

Sophos XG - Ipsec PSK

Top Replies