Ipsec cisco rv042 and sophos

[Pialex]

Hi, Until a few days ago my ipsec connection between my cisco rv042 and my Sophos xg firewal functioned correctly. After updating the sophos to version 17, it worked for 2 weeks and already yesterday it stopped connecting. is configured with ikev1, aes 128, MD5 and group 1, if I return the version of the sophos backwards it works but I need to stay the verge 17, and change the settings to try and nothing. any ideas

[Richard Burts]

Interesting that it was working, when you upgraded to version 17 it stopped working, and works again if you revert to the earlier version. Also interesting that it worked for a while after upgrading, which I find very puzzling. When an upgrade changes something that breaks connectivity I expect the impact to be pretty immediate. Very odd that it works for two weeks and then breaks.

In looking at the config of the sophos can you identify anything that changed with the new version?

Do you know whether the problem is impacting the ISAKMP or the IPSEC processes? I am not optimistic about it but I would suggest running debug for crypto on your cisco (probably both ISAKMP and IPSEC) and see if it provides any insight. Does the sophos have tools for investigating this issue?

HTH

Rick