This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC S2S VPN with ASA5520

leachus2002 over 9 years ago

Good Morning Everyone,

I am trying to setup a site-2-site VPN tunnel between a Sophos UTM and an ASA5520. I was originally following this guide:

https://www.sophos.com/en-us/support/knowledgebase/115252.aspx

However, this is out of date, and not relevant to the latest version of ASA (9.1) or ADSM (7.5)

Does anyone know of any other Knowledgebases, or tutorials on how to get the Site-2-Site tunnel up and running?

As much as I try, I keep getting failures at Phase 2 of the connection.

Thanks
Matt

This thread was automatically locked due to age.

0 BAlfson over 9 years ago

Hi, Matt, and welcome to the User BB!

In the UTM, with debug off, disable the IPsec Connection, start the IPsec Live Log, wait until a few lines appear, enable the IPsec Connection and show us approximately 50 lines representing a single connection attempt. Also, click on [Go Advanced] below to attach a picture of the IPsec Policy in the UTM. Confirm that NAT-T and DPD are enabled on both sides and that the Cisco is using Main Mode, not Aggressive.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel