VPN IPSec Site-to-Site don´t estabilsh

Hi Ruben Frio: Thank you for reaching out to the Sophos community team. Can you please check the IKE version used on both sides, seems both end policies selected IKE version are mismatched.

Hi Vishal,

Both fws are with the same policies IKE version as you can see below:

I created a new policy and did the same configuration to test if the problem was with the DefaultHeadOffice policy but still dont work.

One more thing,

I have these outputs:

FW1

FW2

Hi Ruben Frio: Thanks for sharing this latest snapshot, based on the shared snapshot it seems packets on FW2 are one way. To validate the same you may capture TCPDUMP on both the XG CLI during tunnel establishment. Response packets shared by FW1 have not reached FW2.  Please check the upstream network to ensure no blocking or at FW2 or FW1 end if there are any other ISP try one by one on both ends by checking IPSec tunnels on those ISP to see how it goes with same policy and settings to narrow down it further.

Hi Vishal,

Thank you very much for the answer, however I ended up doing VPN Ipsec with another equipment.