How to create a IPSEC with phase 2 connection

Question

Hi guys,

I'm trying to create a new IPSec with Phase 2 connection, I have setup both connection which from 66.96.206.166 to 180.75.53.129. But regarding Fortinet reply, XG site is not bring up any connection. So I'm wondering how to setup a IPSec.

Edited TAGs
[edited by: Erick Jan at 3:45 AM (GMT -8) on 14 Jan 2025]

Erick Jan · Answer

Hi Xuan, 
 Thank you for reaching out to Sophos Community. 
 I recommend checking both sides' VPN logs(Charon.logs for Sophos) to give us more details about what is happening. 
 Can I also inquire about the version of your Sophos Firewall? 
 
 Check logs and configurations 
 Sophos Firewall: Troubleshooting site-to-site IPsec VPN issues 
 
 Also. kindly see KB's for references 
 
 https://www.youtube.com/watch?v=jPudMe2qRSM 
 https://community.fortinet.com/t5/FortiGate/Technical-Tip-Set-up-IPsec-VPN-between-FortiGate-and-Sophos-XG/ta-p/291023 
 https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/Pocket-Guides/Establish-IPsec-VPN-Connection-between-Sophos-and-Fortigate-with-IKEv2.pdf 
 Can't establish a IPSEC tunnel btw Sophos XG and Fortigate