IPSec VPN Pix <----> Fortigate Disconnects

[david.morrow]

Hi all. First off let me state that I am a rookie with IPSec VPNs, particularly using Pix firewalls.

I recently setup a VPN between a Cisco Pix and a Fortigate firewall.

The VPN works fine, but if I do not constantly move traffic through the VPN, it disconnects and does not reconnect unless I force traffic through from the Pix side.

Anyone seen this?

[Patrick Laidlaw]

David,

I've had this problem with certain pix6.x.x version connecting to non cisco firewalls for vpns. The Pix's that I've upgraded to 6.3.5 I haven't had the same problems with.

Patrick

[david.morrow]

My Pix is actually running version 7 :)

[Patrick Laidlaw]

Try enableing Keepalives on the pix in the isakmp policy and you can always take the isakmp lifetime way down for this peer so that it's forced to renegotiate.

isakmp keepalive 120

isakmp policy 10 lifetime 3600

Patrick

[david.morrow]

Thanks. I will give that a try and report back on status.

[david.morrow]

Unfortunately, the problem persists. Anyone have any other ideas?