This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC sophos SG XG best ciphers

piddae over 2 years ago

Dear Sophos Workers,

i have the following configuration:

Sophos SG direct connected to the internet

Sophos XGS behind a Tkom Digibox.

Which cipher suites would you take, to establish a stable connection?

Greetings Piddae

This thread was automatically locked due to age.

Top Replies

piddae over 2 years ago in reply to Vivek Jagad +1 verified

Remark. Wehave changed form rsa to preshared key. No more Problems.

0 Vivek Jagad over 2 years ago

Hello piddae,

Thank you for reaching out to the community, a pocket guide might be able to assist you: https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/Pocket-Guides/Configure-Site-to-Site-IPsec-VPN-between-XG-and-UTM.pdf

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 piddae over 2 years ago in reply to Vivek Jagad

Thanks,

but this cipher is in my opinion insecure. DH-Group 2 no way.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to piddae

You can use DH-group 5 instead piddae

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 piddae over 2 years ago in reply to Vivek Jagad

I will try.

Thanks a lot.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to piddae

You're welcome piddae cheers !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
+1 piddae over 2 years ago in reply to Vivek Jagad

Remark.

Wehave changed form rsa to preshared key. No more Problems.
Cancel
Vote Up +1 Vote Down

Cancel