Couldnt parse IKE message

Hi  PeteH,

Thank you for reaching out to Sophos Community.

Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue?

Kindly try the following KB for creating a Black Hole, which might assist you

• Create a black hole DNAT rule
•  IPsec connection attempt 

Thanks I have just added the Blackhole dnat.

Just to check the firewall rule needs to be allow rather than drop or reject? 

Hi PeteH,

I would recommend using the drop rule to avoid being probe by any unwanted source.

You may also refer to the following options.

Configure a blackhole DNAT FW rule and put it on the bottom rule of the VPN allow rule (but on the VPN allow rule, you must specify the IP of the users that they commonly use) and let the deny any-any blackhole DNAT serve as a deny-all for any unwanted attempt.

Or configure the blackhole DNATt rule and put it on the malicious IPs on the source of the rule, then on top of the FW allow rule for VPN

I followed the instructions on your previous link. so my fw and nat rule looks like this.

Which bits need changing?