IPSec Recommended Settings for Branch Office

Hello,

Thank you for you reaching Sophos Community!

Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office configuration?

Keeping the rekeying value lower then the HO should help having tunnel established.

You may review below Recommended Read:

 Sophos Firewall: Best practice for site-to-site policy-based IPsec VPN 

Further you may refer to the below troubleshooting steps:

support.sophos.com/.../KB-000038566

Hello,

Thank you for you reaching Sophos Community!

Ideally, we suggest using the DefaultBranchOffice. As you are facing an issue with this, can you share us the Policy parameters of the head office configuration?

Keeping the rekeying value lower then the HO should help having tunnel established.

You may review below Recommended Read:

 Sophos Firewall: Best practice for site-to-site policy-based IPsec VPN 

Further you may refer to the below troubleshooting steps:

support.sophos.com/.../KB-000038566

Hi,

I changed the Defaultbranchoffice to Branch office (IKEv2) and now it is not disconnecting.