This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mac OSX update 10.11.4 breaks the Cisco IPSec Client

Apple recently released OSX 10.11.4 which updated their IPSec built-in VPN to be compatible and support the Cisco AnyConnect client. However, it also apparently has broken the ability to connect a Mac OSX 10.11.4 client using the Apple built-in Cisco IPSec client to Sophos XG. We have not been able to find any setup configuration that works now as neither the Shared Secret config or a Cert/DSN config seems to work. I have read others are using the "L2TP over IPSec" on the Mac to connect to Sophos XG. Any recommendations?

This thread was automatically locked due to age.

Parents

0 GaryChancellor over 8 years ago

For those that may be interested, here is the Apple note on the changes to IPSec in Mac OSX/iOS

https://support.apple.com/en-us/HT206154

From reading this and other user posts, Apple (at Cisco request?) has dropped support for DH group 2 Aggressive mode and XG is not responding with DH group 5 or 14 and no options to set it to accept the newer standards.

Regards,

Gary
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 GaryChancellor over 8 years ago

For those that may be interested, here is the Apple note on the changes to IPSec in Mac OSX/iOS

https://support.apple.com/en-us/HT206154

From reading this and other user posts, Apple (at Cisco request?) has dropped support for DH group 2 Aggressive mode and XG is not responding with DH group 5 or 14 and no options to set it to accept the newer standards.

Regards,

Gary
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data