Hi,
I am facing Incorrect PSK and UDP port block issue when trying to connect SOPHOS connect. My request is going through one branch office SOPHOS firewall. When I am trying to connect from outside the branch office firewall, its connecting. I have unblocked the IKE service and allowed all traffic. Yet I am facing the same issue. For reference, I have uploaded the firewall logs. Kindly help to solve the issue.
2021-10-16 07:59:00PM 15[IKE] <Mycompany|25> INFORMATIONAL_V1 request with message ID 2105044708 processing failed
2021-10-16 07:59:02PM 13[IKE] <Mycompany|25> sending retransmit 1 of request message ID 0, seq 3
2021-10-16 07:59:02PM 13[NET] <Mycompany|25> sending packet: from 192.168.172.2[54844] to X.X.X.X[4500] (92 bytes)
2021-10-16 07:59:03PM 12[NET] <XXXX|25> received packet: from XX.XX.XX.XX[500] to 192.168.172.2[54843] (92 bytes)
2021-10-16 07:59:03PM 12[ENC] <Mycompany|25> invalid HASH_V1 payload length, decryption failed?
2021-10-16 07:59:03PM 12[ENC] <Mycompany|25> could not decrypt payloads
2021-10-16 07:59:03PM 12[IKE] <Mycompany|25> message parsing failed
2021-10-16 07:59:03PM 12[IKE] <Mycompany|25> ignore malformed INFORMATIONAL request
2021-10-16 07:59:03PM 12[IKE] <Mycompany|25> INFORMATIONAL_V1 request with message ID 1759850583 processing failed
2021-10-16 07:59:08PM 15[IKE] <Mycompany|25> sending retransmit 2 of request message ID 0, seq 3
2021-10-16 07:59:08PM 15[NET] <Mycompany|25> sending packet: from 192.168.172.2[54844] to XX.XX.XX.XX[4500] (92 bytes)
2021-10-16 07:59:09PM 12[NET] <Mycompany|25> received packet: from XX.XX.XX.XX[500] to 192.168.172.2[54843] (92 bytes)
2021-10-16 07:59:09PM 12[ENC] <Mycompany|25> invalid HASH_V1 payload length, decryption failed?
2021-10-16 07:59:09PM 12[ENC] <Mycompany|25> could not decrypt payloads
2021-10-16 07:59:09PM 12[IKE] <Mycompany|25> message parsing failed
2021-10-16 07:59:09PM 12[IKE] <Mycompany|25> ignore malformed INFORMATIONAL request
2021-10-16 07:59:09PM 12[IKE] <Mycompany|25> INFORMATIONAL_V1 request with message ID 2608440185 processing failed
2021-10-16 07:59:20PM 11[IKE] <Mycompany|25> giving up after 2 retransmits
2021-10-16 07:59:20PM 11[IKE] <Mycompany|25> establishing IKE_SA failed, peer not responding
2021-10-16 07:59:21PM 08[CFG] vici terminate IKE_SA 'Mycompany'
2021-10-16 07:59:21PM 09[ESP] unsupported IP version
2021-10-16 07:59:21PM 52[KNL] interface 46 'Sophos TAP Adapter' changed state from Up to Down
2021-10-16 07:59:22PM 16[CFG] unloaded shared key with id 'Mycompany-psk-id'
2021-10-16 07:59:22PM 08[CFG] unloaded shared key with id 'Mycompany-user-id'
This thread was automatically locked due to age.
