PaloAlto PA440 to SG230 site-2-site IPSEC VPN

SG230 firmware version 9.712-13

PA440 software version 10.1.6-h6

Thank you Vivek,

The Sophos SG230 is UTM9. So it also only supports IKE1 and not IKE2, correct?

Yes that's right ! Alex Suslik  

in my case SG230 provides only option "Initiate"

Is UTM9 using for IKE encryption AES-256-cbc?

So phase 1 IKE1 was successful, but not phase 2

So phase 1 IKE1 was successful, but not phase 2

ok, tunnel is up 

on PaloAlto side in IPSEC Crypto authentication should be set to none.

Welcome to the UTM Community, Alex - thanks for providing the answer for future members with a similar question.

Cheers - Bob