Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 4560 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec tunnel from UTM 9.4 to Fortigate 60D

MatthewHealey

Does anyone here have any up-to-date documentation on getting an IPSec tunnel working between UTM9 and a Fortigate 60D? The only thing I've been able to find is quite old and recommends using 3DES and MD5.



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Matthew, and welcome to the UTM Community!

    I'm not familiar with the Fortigate, so I don't know its capabilities.  Depending on those and on the hardware you're running, I would make different choices.  Start with the AES 128 PFS policy.  If the processor in your UTM computer can do AES-NI, I would clone the AES 128 PFS policy to make a new one with 'IPsec encryption algorithm: AES 128 GCM (128-bit)' if the Fortigate can match that.

    The rest of the issues should have changed from the older document you found, but please let us know if you do find a new trick.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hi, Matthew, and welcome to the UTM Community!

    I'm not familiar with the Fortigate, so I don't know its capabilities.  Depending on those and on the hardware you're running, I would make different choices.  Start with the AES 128 PFS policy.  If the processor in your UTM computer can do AES-NI, I would clone the AES 128 PFS policy to make a new one with 'IPsec encryption algorithm: AES 128 GCM (128-bit)' if the Fortigate can match that.

    The rest of the issues should have changed from the older document you found, but please let us know if you do find a new trick.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML