topic Re: Site to Site Tunnel going down randomly in Firewall and Security Management

Site to Site Tunnel going down randomly

vhebert — Fri, 27 Oct 2023 08:38:57 GMT

Hi, we have a Site to Site tunnel configuration with a 3rd party (Fortigate).

We are able to bring up the tunnel, but sometimes it will randomly go down, and the only thing I manage to find in the logs is the following :

Our public address - Remote public address - 443

IKE Failure : Encryption Failure : No Response from Peer

Action : Reject

(I'll link a screenshot in the post)

This Reject happens everytime the tunnel goes down. I don't know why it's trying to use HTTPS in a site-to-site configuration too.

Any ideas ?

Thanks!

PhoneBoy — Fri, 27 Oct 2023 16:50:53 GMT

This seems like a symptom of the VPN going down versus an indication of the actual root cause.

the_rock — Sun, 29 Oct 2023 01:17:50 GMT

Make sure 2 things are enabled on FGT and CP side.

Andy

FGT side:

I know this says dial up, but I believe same applies for ipsec tunnels, can also be enabled in gui under phase 2 settings.

CP side:

global properties -> advanced -> configure -> vpn properties -> keep_ike_sas (make sure this is on) , if not enable it and install policy