Sophos Firewall

Discussions Ignore IPSEC repeating sequence numbers

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 1 reply
Subscribers 26 subscribers
Views 289 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ignore IPSEC repeating sequence numbers

Mark Percival over 2 years ago

we have an IPSEC tunnel and the XG Firewall is dropping packets where the IPSEC sequence number is repeated.

- are the dropped packets logged ?

- Can we disable this behaviour (e.g. set replay window to zero to disable).

Advice welcome.

This thread was automatically locked due to age.

Parents

0 Erick Jan over 2 years ago

Hi Mark,

Logs can be turned on or turned off based on the Firewall rule

You can do a packet capture and droppacket command further check what is causing this issue.

Drop packet :https://support.sophos.com/support/s/article/KB-000036858?language=en_US

Diagnostic tool: www.youtube.com/watch

Can you elaborate more on the IPSec sequence number being repeated? Thanks

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Erick Jan over 2 years ago

Hi Mark,

Logs can be turned on or turned off based on the Firewall rule

You can do a packet capture and droppacket command further check what is causing this issue.

Drop packet :https://support.sophos.com/support/s/article/KB-000036858?language=en_US

Diagnostic tool: www.youtube.com/watch

Can you elaborate more on the IPSec sequence number being repeated? Thanks

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

Share Feedback

×

Submitted a Tech Support Case lately from the Support Portal?