sa520 firmware 2.1.71 VPN site 2 site diconnection issue

[fruisenor]

Hi,

I have several sa520 appliances, and one of them came with the 2.1.72 firmware and it works perfect... with all others I upgrade to 2.1.71 (because I was not able to find 2.1.72) that is the latest posted in the CISCO download area.

So, is there any way to get 2.1.72 ?

With the 2.1.71 the VPN Site 2 Site works fine some time, but later it disconnect and it does not connect until I disable /enable the VPN

Any ideas?

Thanks.

[Tom Watts]

Hi Francisco, quite the contrary, the 2.1.7.2 firmware is not supported. New units were shipped with this software but it was never released on the Cisco website. 2.1.7.1 firmware is the current and supported software.

I'd recommend to enable dead peer detection and disable the PFS (perfect forward secrecy).

-Tom
Please rate helpful posts

[mindmaster]

Got the same Problems with 2.1.71 with 7 SA520.

Sometimes disable/enable the VPN Site won't work and i have to reboot the SA.

Dead Pear detection is enabled.

I Think it came up after about 1 week of uptime.

Is there a way to reboot the SA automated by script or anything else?

kind regards

HSS