Host2Host VPN connection failing

Dear Community,

I am new to Sophos and have been tasked with moving services from a Watchguard device to an XGS2100 (21.0).

I am having difficulty with successfully connecting an IPsec VPN to a 3rd party vendor. The vendor requires a host-to-host connection to pull data from our local server based on the provided parameters and I followed the following Sophos guides to set it up including -

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/HowToArticles/S2sVPNIPsecCreate/index.html#head-office-configuration

https://support.sophos.com/support/s/article/KBA-000003863?language=en_US#:~:text=Access%20your%20Sophos%20Firewall%20console,route%20to%20the%20host%20destination.&text=Go%20to%20the%20Gateway%20settings,to%20the%20Remote%20subnet%20field.

https://support.sophos.com/support/s/article/KBA-000003878?language=en_US

The status of the IPsec connection is shown to be active but when I attempt to connect I keep receiving this error:

I have followed and tried a number of solutions from Sophos guides to community posts but continue to receive this error.

The scenario and connection settings as currently configured are below:

My network is on the right with the XGS2100, the 3rd party network is on the left using an unknown FW. Public IPs are not actual IPs.

3rd Party provided configuration parameters:

Remote Gateway IP from 86.53.50.193

Remote Destination IP from 217.41.198.67\32

I configured a Host2Host VPN (Policy Based) between them both.

Created IP hosts    

Created IPsec Profile 

VPN Tunnel setup   

Firewall rules configured:

Outbound - Source [LAN, My-Server]  Destination [VPN, 3rd-PARTY]  Any service

Inbound - Source [VPN, 3rd-PARTY]  Destination [LAN, My-Server]  Any service

Enabled Ping on VPN zone for testing.

Viewing VPN log viewer I get 

and  

Someone has an idea? Thanks in advance. 



Edited TAGs
[edited by: Erick Jan at 12:17 AM (GMT -7) on 4 Apr 2025]