IPSec Recommended Settings for Branch Office

Hi,

Are there any specific IPSec Profile recommendations for connecting the branch office that does not have a static real IP Address? I am currently using the DefaultBranchOffice profile, but it disconnects automatically after some time.

Thanks.

Added TAGs
[edited by: Raphael Alganes at 11:53 PM (GMT -7) on 28 Jul 2024]

Top Replies

Mayur Makvana 2 months ago +1 suggested

Hello, Thank you for you reaching Sophos Community! Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office…

Parents

0 Mayur Makvana 2 months ago

Hello,

Thank you for you reaching Sophos Community!

Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office configuration?

Keeping the rekeying value lower then the HO should help having tunnel established.

You may review below Recommended Read:

Sophos Firewall: Best practice for site-to-site policy-based IPsec VPN

Further you may refer to the below troubleshooting steps:

support.sophos.com/.../KB-000038566

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Reply

0 Mayur Makvana 2 months ago

Hello,

Thank you for you reaching Sophos Community!

Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office configuration?

Keeping the rekeying value lower then the HO should help having tunnel established.

You may review below Recommended Read:

Sophos Firewall: Best practice for site-to-site policy-based IPsec VPN

Further you may refer to the below troubleshooting steps:

support.sophos.com/.../KB-000038566

Mayur Makvana
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Children

0 CreateShare 1 month ago in reply to Mayur Makvana

Hi,

I changed the Defaultbranchoffice to Branch office (IKEv2) and now it is not disconnecting.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel