Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 1 reply
  • Subscribers 40 subscribers
  • Views 20821 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to disable PFS

ChrisWhiting

How do I switch off perfect forward security for a site to site IPSec VPN?

There is no tickbox on the policy settings page. This means I cannot connect to Microsoft Azure.



This thread was automatically locked due to age.
  • +1

    Edit your IPSec policy and set the PFS Group in Phase 2 to None. That will disable PFS, at least when looking at the IPsec Policies.. I hope it will help you out

    Sophos UTM 9.3 Certified Engineer
    Sophos UTM 9.3 Certified Architect
    Sophos XG v.15 Certified Engineer
    Sophos XG v.17 Certified Engineer
    Sophos XG v.17 Certified Architect

Unfiltered HTML