Overview: Here in this article we will discuss how to set MSS value in IPSEC connection. After making the below changes all the traffic which is passing through IPSEC connection will use new MSS value. Suppose here scenario is there is site to site IPSEC VPN between XG firewall A and XG firewall B. XG firewall A network—192.168.1.0/24 XG firewall […]
Issue: Here in this article we will discuss how to troubleshoot the issue when one of the IPSEC SA’s remains inactive. We can refer this article when some SA’s are established and some SA’s are down. Troubleshooting: In the above image, we can notice security association between “192.168.80.0/24” and “192.168.64.0/20” is down and security association between “192.168.1.0/24” and “192.168.64.0/20” is […]
Here in this article we will learn how to troubleshoot IPSEC VPN related issues in sophos XG firewall by analysing logs. In case if you are doing initial setup for VPN, follow this article: Strongswan service is responsible for establishing IPSEC VPN, so all the errors related to VPN will be stored in “strongswan.log“. So the first step is to […]
Scenario: Here in this article we will discuss the scenario where SSL VPN users needs to connect IPSEC tunnel remote resources. I will explain the requirement more clearly by showing in network diagram Lets say IPSEC local network is “10.0.0.0/24” IPSEC remote network is “10.0.1.0/24” SSL VPN IP network is “10.81.234.0/24” Now our requirement is to establish connection between “10.81.234.0/24″(SSL […]
Here in this article, we will troubleshoot the issue when traffic from one end of the tunnel is not passing to other end of the tunnel through IPSEC VPN even after tunnel is up. Note: Whenever tunnel is up and traffic is not flowing, never focus on logs just focus on capture, firewall rules and NAT rules. Before troubleshooting the […]
Overview: Here in this article we will discuss how to configure IPSEC VPN site to site connection in sophos XG firewall. Using Site to Site VPN connection we can establish secure VPN tunnel between two private networks over internet. To establish VPN connection you need to configure IPSEC connection parameters in two firewalls. Configure IPSEC Connection: Click on VPN and […]