This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC XG to SG broke after XG V17 Upgrade

I applied the V17 update to my XG 16.05.x software appliance. Everything seems to have upgraded successfully except VPN policy and PSK.

Both Phase 1 DH and 2 PFS changed from Group 14 to Group 2. After fixing this, the VPN still did not connect. I then re-applied the PSK on the XG from my notes and the IPSEC connected and is operating normally.

I don't know if this is an N=1 situation, or wider spread but thought I would post about it in case someone experiences it.

Tony

This thread was automatically locked due to age.

0 RoleMole over 7 years ago

SAme Problem between XG V17 GA1 and UTM 9.505-4

No chance to get the ipsec connection up again - also tested entering PSK again.

Tried EVERY Phase 1 / 2 settings - nothing works

Can anyone please HELP
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 7 years ago in reply to RoleMole

Hi,

please provide Screenshots of the Policy Config used on XG and SG.

Cheers
Cancel
Vote Up 0 Vote Down

Cancel
0 RoleMole over 7 years ago in reply to LuCar Toni

Hello ManBearPig,

same settings are working on 16-MR8!

Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 7 years ago in reply to RoleMole

Please change the "Schlüsselaushandlungsversuche" to 0 and try it again.
Cancel
Vote Up 0 Vote Down

Cancel
0 RoleMole over 7 years ago in reply to LuCar Toni

Hi,

set to 0 / same Problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 RoleMole over 7 years ago in reply to RoleMole

Did anybody Setup a successfully IPSEC connection to Utm 9.505-4 with SFOS 17.0.1 MR-1 ?

When we revert back to SFOS 16.05.8 MR everthing works fine.
Cancel
Vote Up 0 Vote Down

Cancel
0 CMR over 7 years ago in reply to RoleMole

I saw another post where it was suggested to not have special characters in the PSK, it also works if you use certificates instead of PSKs
Cancel
Vote Up 0 Vote Down

Cancel
0 mxull over 7 years ago

Did 17.0.2 fix your problem ?

Regards,

Max
Cancel
Vote Up 0 Vote Down

Cancel
0 RoleMole over 7 years ago in reply to mxull

Hi Max,

We have fixed the issue - see:

https://community.sophos.com/products/xg-firewall/f/network-and-routing/98350/no-chance-to-get-ipsec-site-to-site---xg-17-mr1-to-sg330-9-506-2-up

best regards

RoleMole
Cancel
Vote Up 0 Vote Down

Cancel
0 alda over 7 years ago in reply to RoleMole

Hello RolMole,

I had this IPsec tunnel between 9.505-4 with SFOS 17.0.1 MR-1. Yesterday I upgraded XG to XG v17.0.MR2 and the tunnel still works well.

Regards

alda
Cancel
Vote Up 0 Vote Down

Cancel