This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPsec VPN disconnections Message ID: 18055 and Error: EPR_VPN-1 - IKE message retransmission timed out

Various users are being regularly disconnected from their IPsec VPN, using the Sophos Client.

Users see an error "Connection may fail. The IKE UDP port seems to be blocked"

They will usually be able to reconnect within five minutes.

On the logs I can see "Message ID: 18055 and Error: EPR_VPN-1 - IKE message retransmission timed out (Remote: x.x.x.x)" where the x is the public IP address of the end user.

I'm struggling to imagine that there is an issue with ports being blocked as the VPN will generally connect but just kicks people of a few times a day.

Firewall: XG115 (SFOS 18.5.2 MR-2-Build380) C19107KT96Q4G75

This thread was automatically locked due to age.

Parents

0 Vishal_R over 3 years ago

Hi Patrick Hynes: Are there any common pattern observations during user disconnection time? Like for all users who face disconnection there are any rekey events or etc?

Are you using OTP with Sophos connect client?

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vishal_R over 3 years ago

Hi Patrick Hynes: Are there any common pattern observations during user disconnection time? Like for all users who face disconnection there are any rekey events or etc?

Are you using OTP with Sophos connect client?

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Patrick Hayden over 3 years ago in reply to Vishal_R

Hi Vishal,

I haven't been able to spot any patterns but that doesn't rule it out. However users rarely seem to disconnect at the same time if that means anything.

They are not using OTP. AD synced usernames, passwords with a PSK.
Cancel
Vote Up 0 Vote Down

Cancel

IPsec VPN disconnections Message ID: 18055 and Error: EPR_VPN-1 - IKE message retransmission timed out

Submitted a Tech Support Case lately from the Support Portal?