This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

iOS 10 IPSEC VPN to Sophos XG w/certificate-based authentication

Hello fellow XG users,

I'm attempting to establish an IPSEC VPN tunnel from several different iOS devices back to the Sophos XG Firewall. I've followed the steps in various UTM & XG knowledge base articles in an attempt to piece together a working solution, but nothing seems to work.

So far, I've built profiles with the Apple configuration utility and also downloaded the .mobileconfig file from the user portal. The one thing that's consistent is the error message I receive on the devices: "Could not validate the server certificate."

Any advice/guidance from folks who have successfully established an IPSEC tunnel from iOS to XG with certificate-based authentication?

Thanks in advance for your help!

chobo997

This thread was automatically locked due to age.

Parents

0 lferrara over 8 years ago

Chobo997,

can you share your IPSec policy?

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 c h over 8 years ago in reply to lferrara

Luk,

Thanks for the reply. I followed this knowledge base article to set things up: https://community.sophos.com/kb/en-us/123137. Connections using "pre-shared key" are now working.

However, certificate-based authentication continues to be a no-go. Any thoughts on the exact configuration needed for an iOS device to successfully connect to the XG Firewall with certificates?

Thanks so much,
chobo997
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to c h

Chobo997,

you have to pay attention on certificates you have configured inside the IPSec policy. If you share what you have configured, we have more clarity.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 8 years ago in reply to c h

Chobo997,

you have to pay attention on certificates you have configured inside the IPSec policy. If you share what you have configured, we have more clarity.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data