[7.190] cant create new IPSEC GW with PSK [CONFIRMED]

If i try to add additional Remote Gateway (Initiate Connection, PSK)
the entryfield "Key" starts to blink red, but i cant save.
Same happens if i open an existing GW and try to save.

Gregor Kemter

$_alex\$

0 _alex\ over 17 years ago

do you have other IPSec PSK connections in use?

there was a fix that only one PSK-key is allowed on the asg.

/alex
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 gkemter over 17 years ago in reply to _alex\

i have total 6 different GWs with different PSK, only one is a respond only gateway.

do you have other IPSec PSK connections in use?

there was a fix that only one PSK-key is allowed on the asg.

/alex

I thought this fix only applies to respond only gateway [:S]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 17 years ago in reply to gkemter

Man, I hope I'm reading this wrong; I have a customer that (due to limitations with the Watchguard boxes at the remote sites) has six different IPSEC VPNs configured using PSK (all with unique keys) ... is the OP saying that functionality is now broken?

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 ReD-MaN over 17 years ago in reply to BrucekConvergent

omg.. confirmed.. I am unable to create new remote gateways using initiate and PSK. This is BAD. I have over 60 different remote gateways with different PSK for each.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
$_alex\$

0 _alex\ over 17 years ago in reply to ReD-MaN

sorry for my misleading information [:)]

only one psk should be allowed for all psk-respond only site-to-site connections.
but it should be possible to have different psk keys for initiate connections remote.

this seems to be a bug. i'll have a look on it and report back later.

/alex
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
$_alex\$

0 _alex\ over 17 years ago in reply to _alex\

confirmed, it's a bug...you should be able to have more than one psk for initiate connection gateways...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 17 years ago in reply to _alex\

and I'm now allowed to do it with respond only [:)]

https://community.sophos.com/products/unified-threat-management/astaroorg/f/92/t/66567
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 17 years ago in reply to BuBU

Good catch, Gkemter... that one would've been a "mess" for sure!
[:)]

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel