Sangfor Community»Categories Product Network Secure with next version(NGAF) NGAF - VPN SANGFOR site to site

NGAF - VPN SANGFOR site to site

views: 3702 | comments: 9 | added to Favorites 0
Lights on | 提示:支持键盘翻页<-左 右->
    组图打开中,请稍候......
Created: 20 Feb 2023 19:23

Summary:

Hi, I have a problem with VPN site to site. I have two NGAF: one in HQ and the other in the Branch site. If I use standard IPSec all it's work. But i would like to use Sangfor VPN. In both NGAF I have ...

Reply

Newbie517762 Posted 27 Feb 2023 09:47
Thanks for your information.
rivsy Posted 27 Feb 2023 09:32
Check the firewall rules
Jhazz Posted 27 Feb 2023 09:30
You can configure the Pass Through for this one
FahmiAzlanMY Posted 23 Feb 2023 09:50
Witch port use VPN Sangfor? Only TCP/UDP 4009?
-YES, and another port usually IPSec use UDP 500 and 4500

Debug only can see the log
System > Troubleshooting > Log > VPN Service

As i know Sangfor VPN much simple setup if both sites using NGAF, you need to make sure both sites policy allowed. One more thing, you need to choose either one, you cannot apply both VPN solution.

For further back-end debug, you may open case to Sangfor Support team.
CLELUQMAN Posted 22 Feb 2023 17:11
To debug you can
1.Check the configuration on both NGAFs to ensure the shared key and user credentials are matches.
2.Check the public IP for both NGAFs are correct and accessible from the internet.
3.Check the logs for any error or warnings related to the VPN connection. System > Troubleshooting > Log > VPN Service
4.Check for firewall rules or network configurations blocking the VPN traffic. Use the Global passthrough . System > Troubleshooting > Global passthrough and analysis > Turn on.

If these steps cannot help you to solve this issue, please contact Sangfor technical support for assistance.
BoonSeong Posted 22 Feb 2023 16:38
Can you share the configuration of both HQ and Branch. Besides you may go to System >  Troubleshooting > Log to check what is the error shown.
Julius Posted 21 Feb 2023 17:42
Can you show a screenshot for both HQ and Branch?
Faisal P Posted 20 Feb 2023 23:56

Deploy IPSec VPN on Sangfor and NGAF there are some basic configurations for deploying IPSec VPN connection between NGAF

1292163f3979b35526.png (10.27 KB, Downloads: 434)

1292163f3979b35526.png

7697463f397c25b0d1.png (10.09 KB, Downloads: 431)

7697463f397c25b0d1.png