After latest update;
XG115w (SFOS 17.5.9 MR-9)
VPN connection between Cyberoam started to give this Deny in the log
|
Any ideas?
This thread was automatically locked due to age.
Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
After latest update;
XG115w (SFOS 17.5.9 MR-9)
VPN connection between Cyberoam started to give this Deny in the log
|
Any ideas?
Hi Can carmack
Please verify the IPsec policy configuration Security Parameter Index SPI is a part of IPsec SA.
Please refer to the article - https://community.sophos.com/kb/en-us/123600
Regards,
Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Hi Can carmack
Cyberoam Support IKE v1 and SPI are the configurations for Phase -1 and Phase -2 configuration of the IPsec policy.
I would request you to verify the Phase -1 and Phase -2 parameters in XG and Cyberoam firewall configuration, you may share the configuration screenshot for IPsec and IPsec policy.
Regards,
Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Hi Can carmack
How many IPsec VPN tunnel configured in the Cyberoam and XG?
Are they connected to different remote WAN IP or the same WAN IP?
Policy configuration seems to be correct, I would recommend you to contact technical support and open a service request.
Regards,
Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Hi Can carmack
Thank you for your reply. Could you please PM us the service request number to check the history of the case?
Regards,
Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Hi Can carmack
You may upgrade the firmware version.
For the provided case ID in the DM, the support engineer has resolved the issue and share the required details over the email and close the case with your agreement.
Please let us know if you require any further assistance on the reported query/case
Regards,
Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Hi Can carmack
You may upgrade the firmware version.
For the provided case ID in the DM, the support engineer has resolved the issue and share the required details over the email and close the case with your agreement.
Please let us know if you require any further assistance on the reported query/case
Regards,
Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link