IPSec and Cisco ASA - Problem with Phase 1

Philip,

who the initiator? Does the VPN Policy match on both end?

The SOPHOS is the initiator.

The IPSec profiles matches on both sites or what do you mean with VPN Policy?

Philip,

I had trouble connecting between XG and a SonicWALL.  I tried tons of different configurations and came up with one specific set of options that works, which I'm careful not to change between those two devices:

hope that helps

Thanks for your help Luk and ZaneDonaldson,

after trying dozens of configurations, I finally find out that the sophos seems to ignore the key group settings.
It doesn't matter which key group I set, it always uses group 2.

Thanks Philip for letting us know.

Can you open a ticket?

Aditya Patel, sachingurung can you investigate on this issue?

Thanks

Check the IPSec logs with different key group set and verify what the logs show. 

Thanks