Need to re-input the Pre-shared key to establish Sophos to FortiGate

Try not to use * (Wildcard) for IPsec Site to Site connections. 

Use a DDNS / Fixed IP as a remote gateway. 

Hi Sandy Blaza: Thank you for reaching out to the Sophos community team, As you have set remote Gateway "*" in your current configuration, I hope you had set the same PKS for all such tunnels where you are setting up remote gateway * (including existing tunnels and upcoming new ones).

As when you save or add new tunnels it will going to update PSK for all connections where the remote GW IP is set to the same, here in your case remote GW is *, so for all such tunnels, you must be required to use the same PSK and during saving tunnels or adding a new one you get below pop up as well which gives the same information.




Note: In case you are already using the same PSK for all site-to-site tunnels where remote GW is * and still it is required to update PSK then please ensure on your existing XG/XGS if Sophos Remote access VPN or L2TP is configured with PSK method then please set the same PSK for them as well as that falls under such settings where Remote GW is * only.

Each site-to-site VPN is owned by a certain individual or organization, and we are required to establish it exclusively for the owner. That's why each IPsec site-to-site connection uses its own pre-shared key.

Is there a way to do it?

Hi Sandy Blaza  As Bharat J has mentioned if you do not want to use the same PSK then please use their actual remote GW IP or DynDNS in place of defining the same remote gateway "*" (any) for all of them to avoid this.