This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Establish s2s ikev2 vpn connection between sophos and windows server ras

Dear,

We are configuring site-to-site ikev2 vpn connection between sophos firewall and a windows server that with remote access service installed.

Now a normal PC can connect to windows server by native vpn config. But sophos failed to connect to windows server with any profile.

I tried ikev2 profile, and capturing packet on my windows server. The packets show that IKE_SA_INIT Initiator Request and Responder Response was sent back. And no more packet returned from sophos firewall.

I think it might be a reason that I cannot select user authentication in advanced settings if I use ikev2 profile on sophos firewall. And I found this discussion but the link in answer was 404.

So how to site2site connect sophos firewall with a vpn server (ras) installed windows server?

I'm looking forward to your reply.

Best Regards,

This thread was automatically locked due to age.

0 iu iu over 2 years ago

And if in ikev2 mode, when trying to connect, logs show "Couldn't authenticate the local gateway. Check the authentication settings on both devices. "
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago

So you try to connect a Firewall as a Client to a Server? Or is the server the client?

Because it might be not supported to get the SFOS appliance to be a client.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 iu iu over 2 years ago in reply to LuCar Toni

We try to use firewall as client to connect to a windows server (site-to-site ipsec connection). The windows server installed RRAS service, which act as a ipsec vpn server.

But windows seems not support xauth client which firewall used for user auth.
Cancel
Vote Up 0 Vote Down

Cancel