https://community.checkpoint.com/t5/General-Topics/Checkpoint-Ngx-VPN/m-p/87403#M17581 <P>Hello, I am facing some troubles with a site-to-site VPN between a CheckPoint Ngx and a Sophos UTM firewall.</P><P>The vpn uses ike to encrypt the traffic but sometimes it happens that the link is dropped down and it's not bringed back automatically once again.</P><P>Seems like both devices are configured as initiator while one of them should be configured in "responder only" mode. I would like to change this settings on the Checkpoint side since the traffic will usually be initiated from Sophos (and so, it needs to be able to initiate the link).</P><P>How can I check and/or change this settings inside the Checkpoint appliance?</P><P>Thank you.</P> Fri, 05 Jun 2020 08:15:09 GMT Emanuele 2020-06-05T08:15:09Z https://community.checkpoint.com/t5/General-Topics/Checkpoint-Ngx-VPN/m-p/87403#M17581 <P>Hello, I am facing some troubles with a site-to-site VPN between a CheckPoint Ngx and a Sophos UTM firewall.</P><P>The vpn uses ike to encrypt the traffic but sometimes it happens that the link is dropped down and it's not bringed back automatically once again.</P><P>Seems like both devices are configured as initiator while one of them should be configured in "responder only" mode. I would like to change this settings on the Checkpoint side since the traffic will usually be initiated from Sophos (and so, it needs to be able to initiate the link).</P><P>How can I check and/or change this settings inside the Checkpoint appliance?</P><P>Thank you.</P> Fri, 05 Jun 2020 08:15:09 GMT https://community.checkpoint.com/t5/General-Topics/Checkpoint-Ngx-VPN/m-p/87403#M17581 Emanuele 2020-06-05T08:15:09Z https://community.checkpoint.com/t5/General-Topics/Checkpoint-Ngx-VPN/m-p/87524#M17621 I don't believe it's possible to configure us as a responder only, at least for IKE.<BR />I also don't think this is actually relevant to the problem at hand.<BR /><BR />If you are, in fact, running NGX code, this code has reached End of Support long, long ago and you should upgrade to a supported release.<BR />That said, if you want to debug the issue, you can try: <A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk63560" target="_blank">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk63560</A> Mon, 08 Jun 2020 02:25:24 GMT https://community.checkpoint.com/t5/General-Topics/Checkpoint-Ngx-VPN/m-p/87524#M17621 PhoneBoy 2020-06-08T02:25:24Z