Fortinet Community

- Seems like you switched from IKEv1 to IKEv2 and FortiGate started receiving response from peer - Now the negotiation fails during the Auth phase. - FortiGate receives "AUTHENTICATION_FAILED" from peer. - There could be mismatch in the below paramet...

Hello Ashu, As I understand, you would like FortiGate to operate as an IDS appliance( i.e. without actually processing the packets). Correct me, If I am wrong. You could put the FortiGate in one-arm sniffer mode and it would serve the purpose. Below ...

Hello yns_sa, As per the logs , FortiGate is acting as the initiator where it starts the VPN negotiation by sending the 1st message of Phase-1. The below is the snippet, ike 0:vpn_sophos:52504: initiator: main mode is sending 1st message...ike 0:vpn_...