ipsec site-site tunnel issues after power outages

Hi Phani Mande

May I know the firmware version running on both Sophos XG firewalls? What is "Gateway Type" set on Tunnel at Head office and Branch office ?

Sophos recommends setting the gateway at your central location (example: head office) to Respond only and the gateway at your remote locations (example: branch offices) to Initiate the connection. You can troubleshoot connection errors more efficiently using the logs on the initiating device.

Regards

Hi Phani Mande

May I know the firmware version running on both Sophos XG firewalls? What is "Gateway Type" set on Tunnel at Head office and Branch office ?

Sophos recommends setting the gateway at your central location (example: head office) to Respond only and the gateway at your remote locations (example: branch offices) to Initiate the connection. You can troubleshoot connection errors more efficiently using the logs on the initiating device.

Regards

XGS136 (SFOS 18.5.2 MR-2-Build380) . This is the version running on both the firewalls

The gateway type at headoffice is set to respond only and at branch office it is set to initiate. 

Thank you.

Please edit your post and hide appliance number 

To troubleshoot issue by changing gateway type at headoffice set to  initiate and at branch office set to respond only. 

And Share the feedback 

Thank you for the headsup. edited as suggested

Will do that and let you know if it helps

If changing "gateway type" gives the same result, I would also suggest taking backups from both Sophos XG firewall and plan to upgrade the firmware version to the latest v19 MR1 Build 365 as all issues related to IPSec VPN are fixed if the above steps doest work 

Below is the link: 

https://community.sophos.com/sophos-xg-firewall/b/blog/posts/sophos-firewall-v19-mr1-re_2d00_release-build-365-is-now-available

Thanks and Regards

For some reason, I'm unable to select the branch office when I select the gateway type to respond only. The branch office option is fading out when I select respond only and is only available when I set the type to initiate.

Hi Phani Mande 

Please select IKEv2 Policy on both the firewall on the IPSec VPN Tunnel or at the Branch office you can select Gateway type respond only and policy defaultHeadOffice and at Head office Gateway type to " Initiate the connection" and select policy defaultbranchoffice.

Regards