Skip to main content
praveen_Dharmaraj
praveen_Dharmaraj
New Member
October 12, 2015
Question

IPSEC VPN Between Fortigate And Cisco

  • October 12, 2015
  • 1 reply
  • 6633 views

Dear All ,

 

i created IPSEC VPN from FGT to CISCO (its a migration from checkpoint to FGT )

 

Encryption ,hashing , DH , Key life and pre share are all same as before .

 

Key exchage/Proposal exchange i can see after(ident_i3send)  am getting error :

 

Ignoring unencrypted PAYLOAD-MALFORMED message From -----(remote Gateway IP)

 

Thanks,

Praveen

 

1 reply

awasfi_FTNT
Staff
awasfi_FTNT
Staff
October 12, 2015

Hello Praveen,

 

Check the VPN Client Phase 1 algorithms to be consistent with the gateway (or peer) Phase 1 algorithms. Check the IP address range. Check the Local and remote IDs. (You can specify those if there are multiple tunnels between the two) Note: the local ID on one site is the remote ID on the other site and conversely ! Check the PFS to be activated or not on both peers

Also verify the preshared key and try to avoid special characters.

 

Regards

praveen_Dharmaraj
praveen_DharmarajAuthor
New Member
October 13, 2015

Dear Awasfi,

 

 

Thank you for your update , now its working issue with pre-share key .

 

R/

Praveen

 

 

Terms & ConditionsAccessibility statement