Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Mlinko
Contributor

VPN IPSec Tunnel with Sophos IKEv2 Issue

Dear all,

we have an IPSec Tunnel with a customer that has Sophos GW. If we use Ikev1 the tunnel work without a problem, but if we change to IKEv2 then it doesn't work. 

Error on our side: 

invalid Syntax

 

Error on the other side:

invalid SPI

I'd be glad if someone can share their experience with the so called "free Firewall software". No mater which "Software" based Firewall it is, we always have problems with it.

Thank you and kind regards!
Rok

0 Kudos
8 Replies
Danny
Champion Champion
Champion

IKEv2 between VPN gateways of different vendors has been an issue for many years.
I've created a VPN compatibility matrix for Check Point to document our community experience of IKEv2 with other vendors.

the_rock
Legend
Legend

Nice one @Danny . Btw, does that still apply?

Andy

0 Kudos
the_rock
Legend
Legend

I actually had this issue with large hospital using CP to PAN and it turned out they were using wrong peer ID, since for a long time they used IP from general properties of the CP smart console object, but one day when we did debug and worked with TAC, Tier 3 guy told us that it changed, so they had to use link selection setting.

Just something to verify.

Andy

0 Kudos
the_rock
Legend
Legend

Hey @Mlinko 

Any luck with this?

Andy

0 Kudos
Mlinko
Contributor

Dear Andy and Danny,

Thank you for your help, I'll let you know how it turned out after a debugging session with a client.

KR
Rok

Mlinko
Contributor

The NIS2 directive will hit us any time now, that is why we want to "prepare" and reconfigure the VPN Tunnels with our clients to IKEv2.

the_rock
Legend
Legend

I would say its more less the norm these days to use ikev2.

Andy

0 Kudos
the_rock
Legend
Legend

Sounds good!

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events