diff --git a/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md b/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md index 67c3bce..f6decfc 100644 --- a/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md +++ b/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md @@ -55,17 +55,17 @@ Navigate to "**System > Profiles > IPSec Profiles > Custom_IKEv2_`/` | *Default Value*: `28800` | -| Phase 2 Lifetime | `` | *Default Value*: `14400` | + | **Field** | **Value** | **Notes** | + | :--- | :--- | :--- | + | Phase 1 Lifetime | `` | *Default Value*: `28800` | + | Phase 2 Lifetime | `` | *Default Value*: `14400` | === "Responder Phase Lifetime Values" -| **Field** | **Value** | **Notes** | -| :--- | :--- | -| Phase 1 Lifetime | `` | *Default Value + 300 Seconds*: `328800` | -| Phase 2 Lifetime | `` | *Default Value + 300 Seconds*: `314400` | + | **Field** | **Value** | **Notes** | + | :--- | :--- | :--- | + | Phase 1 Lifetime | `` | *Default Value + 300 Seconds*: `328800` | + | Phase 2 Lifetime | `` | *Default Value + 300 Seconds*: `314400` | !!! warning "Remote / Local Phase Lifetimes" Within the context of the remote and local VPN tunnels, the lifetime of the Phase 1 and Phase 2 encryption keys needs to be shorter on the intiator than the responder sides of the VPN tunnel.