I’ve created a custom IPsec profile using IKEv1 in Aggressive mode, but when I go to add a new Site-to-Site VPN I’m unable to select both “Preshared Key” and my IKEv1 profile together. Why is that?
Hi KEF,
Thank you for reaching out to Sophos Community.
Aggressive mode is disabled for IKE v1 due to security issues. Kindly see the link or screenshot for the following query.
https://docs.strongswan.org/docs/latest/support/faq.html#_aggressive_mode
Erick Jan
Global Community Engineer, Support & Services
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.
The award-winning home for Sophos Support videos! - Visit Sophos Techvids
Quote