[vpn-help] WatchGuard XTM 505 and IPSec-VPN

[Kevin VPN]

On 08/02/2013 07:13 PM, Tommy Farnsworth wrote:
>
> I am sort of new to VPNs, but am learning.
>
> I have a WatchGuard XTM 505 with 11.6.3 firmware and Management
> software 11.6. I set up a Mobile VPN using IPSec. Clients are using
> the Shrewsoft VPN client.
>
> All of the clients connected fine and it seems to work with one major
> problem, they all get connected after an hour or so on connection.
> When this happens it causes a loss of work on their part and they
> have to reconnect.  Is there a way to keep the connection open
> longer?
>

Hi Tommy,

The first thing I look at when I see disconnects after a consistent 
amount of time is the Phase 1 and Phase 2 Key Life Times.  Make sure 
that the settings in the Shrew Site Configuration match exactly with 
what the VPN Gateway (the WatchGuard) is set to.  If they do not match, 
they will not renegotiate keys properly, resulting in disconnects.