BOVPN Established Event Notice Spam?

MuzixsMuzixs
in Firebox - VPN Branch Office

I'm noting alot of events coming from the Traffic Monitor Events tab. I get the following message indicating a connection has been establish from a BOVPN interface I have configured, but thought it was odd that the message is showing nearly 3 times within a minute. Is this normal?

2020-07-11 02:25:05 iked (FROM<->TO)'Kinetix-TMI' BOVPN IPSec tunnel is established. local:0 remote:0 in-SA:0x8e3d4243 out-SA:0x97fa0dd0 role:responder msg_id="0207-0001"

Comments

  • Bruce_BriggsBruce_Briggs

    No this is not normal.

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @Muzixs
    In that case, role:responder means that the other side of the tunnel is initiating the renegotiation/rekeying. The WatchGuard is just logging that it's happening.

    Take a look on the other side to determine why it's restarting the tunnel.

    -James Carson
    WatchGuard Customer Support

Sign In to comment.