Sophos Firewall IPSec Remote Connection with IKEv2

Question

Hello Community, 
 
 the default policy for IPSec (Connect Client) VPN use IKEv1. Is it possible to build a new profile with IKEv2? 
 What should I configure that its secure and works well? 
 
 I hope someone have a best practice for me. 
 
 Thank you in advance!

Vivek Jagad · Accepted Answer

Hello David Lorenz , Thank you for your query, Support for IKEv2 for Remote Access IPsec 
 This is not supported as of now. The IPsec profiles with the key exchange of IKEv2 cannot be selected for encryption when configuring Remote Access IPsec. Configuration challenges of Remote Access IPsec VPN connection : support.sophos.com/.../KB-000037126

Alok · Answer

Hi David, 
 
 IPsec RA supports only IKEv1 as of today, you can create custom policy with desired encryption from available list. 
 Above NC-92485/NC-93700 is about adding new default IKEv2 HO/BO policy for IPsec S2S (PBVPN/RBVPN) only. 
 
 Regards, 
 Alok

Sophos Firewall IPSec Remote Connection with IKEv2

Top Replies

Submitted a Tech Support Case lately from the Support Portal?