This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN Site to Site - Questions about encryption

Hello everyone,

To configure a site-to-site VPN between two XGS 116, is it better to configure encryption as IKEV2 on both firewalls or DefautHeadOffice for the headquarters and DafautBranchOffice for the branch?

Thanks
André Soares

This thread was automatically locked due to age.

Top Replies

Vivek Jagad 10 months ago +2 verified

Hello Andre Soares , Thank you for reaching out to the community, I'd recommend always creating a custom IKEV2 policy rather than choosing the stock default available policy.

Parents

+2 Vivek Jagad 10 months ago

Hello Andre Soares ,

Thank you for reaching out to the community, I'd recommend always creating a custom IKEV2 policy rather than choosing the stock default available policy.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +2 Vote Down

Cancel
0 Andre Soares 10 months ago in reply to Vivek Jagad

Thanks for the answer, another question, in firewall rules, should I put an IPS policy?
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad 10 months ago in reply to Andre Soares

Over VPN not recommended...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Reply

+1 Vivek Jagad 10 months ago in reply to Andre Soares

Over VPN not recommended...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data