Skip to main content
Fullmoon
New Member
November 15, 2017
Question

ipsec vpn blocks ipsec vpn protocol?

  • November 15, 2017
  • 1 reply
  • 2705 views

as the title implies, anyone could share on how to troubleshoot if the ISP Router blocks/not accepting ipsec vpn protocol?

I setup DialUp VPN wherein remote sites able to established from HO-remote sites, Dial VPN is working already, recently our HO acquired new ISP, if remote sites pointing to the new ISP tunnel is not showing up. Tried to reboot remote site firewall and modem just to clear in cache but no avail, reverting back to old ISP and VPN is tunnel is working fine.

    1 reply

    Toshi_Esumi
    SuperUser
    SuperUser
    November 15, 2017

    I would just sniff at both sides of FG and see what one end is sending, which the other end is not receiving. It could be UDP 500 or 4500 blocked depending on NAT-T or not. Or could be just ESP(50)/AH(51) blocked after SAs have been established. Time to time this happens to our new customers when we try setting up IPSec between us and the customers.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!