Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 678 views
  • Users 0 members are here
Options
Suggested

Firewall behind ISP Router

ywillie

Is there a way to check if the ISP router doesn't supports IKE2 causing IKE2 IPSEC tunnel to fail.
A troubleshoot method or guide ?
This is to proof to Service Providers that the problem lies in their end and not firewall.



Added TAGs
[edited by: Raphael Alganes at 12:22 PM (GMT -7) on 22 Oct 2024]
Parents
  • 0

    Hello,
    what problem are you seeing? What does the connection look like in the GUI? What is in the log viewer under "VPN"
    Are IKE packets arriving at the firewall (packet capture with filter "port 500")
    How long has the problem been occurring?
    Sophos recently made a change to IKE which can cause IPSec problems with third-party devices. (In our case, the Cisco ASA allowed IKE through, but not ESP data)
    may be, IPSec is used on the ISP-router too ...?


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Reply
  • 0

    Hello,
    what problem are you seeing? What does the connection look like in the GUI? What is in the log viewer under "VPN"
    Are IKE packets arriving at the firewall (packet capture with filter "port 500")
    How long has the problem been occurring?
    Sophos recently made a change to IKE which can cause IPSec problems with third-party devices. (In our case, the Cisco ASA allowed IKE through, but not ESP data)
    may be, IPSec is used on the ISP-router too ...?


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

Children
No Data
Unfiltered HTML