This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPsec problem with V8

Hallo,

I have upgrade the ASG 220 to V8.002, and now the IPsec connection broke after some time.

It looks like a problem, while the "IPSec SA lifetime" is ending. But in WebAdmin / Site-to-site VPN the connection is established and green.

IKE: Auth PSK / Enc 3DES_CBC / Hash HMAC_SHA1 / Lifetime 7800s / PFS MODP_1024 / DPD
IPSec: Enc AES_CBC_256 / Hash HMAC_SHA1 / Lifetime 7800s / COMPRESSED

Is that a known bug, or should I discard the assumed config and make it new.

greetings,
mcfuture

This thread was automatically locked due to age.

Parents

0 BAlfson over 15 years ago

Here's the post Bruce was talking about: https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/p/27732/83806#83806, so it looks like there's no problem with SHA1, only with SHA2-256 and -512.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 15 years ago

Here's the post Bruce was talking about: https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/p/27732/83806#83806, so it looks like there's no problem with SHA1, only with SHA2-256 and -512.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BrucekConvergent over 15 years ago in reply to BAlfson

Here's the post Bruce was talking about: https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/p/27732/83806#83806, so it looks like there's no problem with SHA1, only with SHA2-256 and -512.

Cheers - Bob

Thanks for the clarification, Bob ... looks like maybe he was using one of these.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel