Lock the GRE tunnel when IPsec goes down

Hello Gib GoDesk,

Thank you for reaching out to the community, just setup the GRE Tunnel from CLI:
GRE KBA: https://support.sophos.com/support/s/article/KB-000035813?language=en_US

You can also refer a old community link for further clarification: https://community.sophos.com/sophos-xg-firewall/f/discussions/99080/gre-tunnel-between-sophos-xg-s

Sorry. You didn't understand me.

I already have GRE with IPsec configured. It works.

The problem is, when the IPsec connection for whatever reason it went down.

VPN didn't stop with the fall of IPsec. So without ipsec GRE continued to transmit data unencrypted.

I wanted to fix it. Has as?

Hey Gib GoDesk,

Thank you for the clarification, how often or how frequently IPsec tunnel goes down?

Can you enable the debug for the strongswan service and collect the logs and share with us here?

To enable/disable debug: service strongswan:debug -ds nosync

https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Logs/LogFileDetails/index.html

Hey Gib GoDesk,

Thank you for the clarification, how often or how frequently IPsec tunnel goes down?

Can you enable the debug for the strongswan service and collect the logs and share with us here?

To enable/disable debug: service strongswan:debug -ds nosync

https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Logs/LogFileDetails/index.html