This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec Recommended Settings for Branch Office

Hi,

Are there any specific IPSec Profile recommendations for connecting the branch office that does not have a static real IP Address? I am currently using the DefaultBranchOffice profile, but it disconnects automatically after some time.

Thanks.

This thread was automatically locked due to age.

Top Replies

Mayur Makvana 3 months ago +1 suggested

Hello, Thank you for you reaching Sophos Community! Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office…

Parents

0 Mayur Makvana 3 months ago

Hello,

Thank you for you reaching Sophos Community!

Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office configuration?

Keeping the rekeying value lower then the HO should help having tunnel established.

You may review below Recommended Read:

Sophos Firewall: Best practice for site-to-site policy-based IPsec VPN

Further you may refer to the below troubleshooting steps:

support.sophos.com/.../KB-000038566

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 Mayur Makvana 3 months ago

Hello,

Thank you for you reaching Sophos Community!

Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office configuration?

Keeping the rekeying value lower then the HO should help having tunnel established.

You may review below Recommended Read:

Sophos Firewall: Best practice for site-to-site policy-based IPsec VPN

Further you may refer to the below troubleshooting steps:

support.sophos.com/.../KB-000038566

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel

Children

0 CreateShare 3 months ago in reply to Mayur Makvana

Hi,

I changed the Defaultbranchoffice to Branch office (IKEv2) and now it is not disconnecting.
Cancel
Vote Up 0 Vote Down

Cancel