IPSec and Cisco ASA - Problem with Phase 1

Question

Hello everybody, 
 currently I try to connect my XG 85 to a Cisco ASA Firewall via Site-to-Site IPsec connection. 
 First it seems to work. The Connection state was green, but it wasn't possible to pass traffic through the connection. 
 After a look in the log files I found this error:

IPsec

SUCCESSFUL

-

EST-P1: Peer did not accept any proposal sent

The settings are the same on both sites: 
 
 I also tried it with SHA2 256, at which the Cisco Support announced: "Please use SHA1, it seems that the Sophos has a bug and can not uitilze SHA256 correctly."

Philip Behrens · Accepted Answer

Thanks for your help Luk and ZaneDonaldson, 
 after trying dozens of configurations, I finally find out that the sophos seems to ignore the key group settings. It doesn't matter which key group I set, it always uses group 2.