Info: Untangle - Watchguard Firebox settings
Hi Folks,
Hope the following settings help as we have found these work with various version of x10 and x20 edge models:
Credential Method: Shared Key
Main Mode, IP Address
Phase 1
SHA1-HMAC
3DES-CBC
Neg expires in 0kb, 8 hours
DH group 2
Enabled DPD (Note that this is important, IKE Keep alive is proprietary and does not work)
Phase 2
SHA1-HMAC
AES 256
Untick TOS for IPSEC
Enable PFS
key expiry in 128000kb, 24 hours
Perhaps someone with a wiki account could add this?
All the best