Operational Defect Database
BugZero found this defect 772 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
WatchGuard Technologies | kA16S000000O6woSAC
After upgrade to Fireware 12.8, some IKEv2 BOVPNs are unstable
Last update date:
5/2/2022
Affected products:
Firebox M200
Firebox M300
Firebox M270
Firebox M370
Firebox M470
Firebox M570
Firebox M670
Firebox M290
Firebox M390
Firebox M400
Firebox M500
Firebox M440
Affected releases:
All
Fireware
12.x
12.8.x
Fixed releases:
All
Description:
Issue
After you upgrade to Fireware v12.8, some BOVPNs might become unstable and traffic could drop or stop completely. You might see log messages that include the text "SA_INVALID_SPI".
Workaround/Solution
To stabilize the BOVPN, configure both sides of the BOVPN to use IKEv1.
