Passing IPsec networks through SSL VPN

Question

Dear, 
 I have a site-to-site VPN between a Sophos XGS87 and a fortigate. I need SSL VPN users on my Sophos to have access to remote networks from this fortigate. 
 Local networks on the Sophos XGS87 side: 10.40.85.0/24 10.50.85.0/24 
 Sophos SSL VPN Network: 10.81.234.0/24 
 Before publishing the Sophos SSL VPN network to this IPsec, traffic flows normally: 
 
 But after publishing the Sophos SSL VPN network to this IPsec, the networks stop communicating: 
 
 Does anyone have any idea what could be happening and what I can do to resolve it?

Vivek Jagad · Accepted Answer

Hey Lais Medeiros
Based on the logs shared: "invalid HASH_V1 payload length, decryption failed?"
Either use a shorter PSK with a max of 57 characters or update the firmware
REF: IPsec site-to-site connection failure when using a long PSK value

Passing IPsec networks through SSL VPN

Top Replies