From 742dd0374931de18a77601d19cedf1399f21fec8 Mon Sep 17 00:00:00 2001
From: Nicole Rappe <cyberstrawberry101@gmail.com>
Date: Fri, 26 Jan 2024 18:21:07 -0700
Subject: [PATCH] Update Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md

---
 Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md b/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md
index f82dcb3..9a57ec1 100644
--- a/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md	
+++ b/Networking/Sophos/IPSec Site-to-Site VPN Tunnel.md	
@@ -56,6 +56,9 @@ Navigate to "**System > Profiles > IPSec Profiles > Custom_IKEv2_`<Initiator>/<R
 !!! warning "Remote / Local Phase Lifetimes"
     Within the context of the remote and local VPN tunnels, the lifetime of the Phase 1 and Phase 2 encryption keys needs to be shorter on the intiator than the responder sides of the VPN tunnel.
 
+## Repeat Steps on Remote Firewall
+You will need to repeat the steps on both firewalls, so one firewall is the initiator, and one is configured as the responder.  Keep special note of the admonitions regarding initiator / responder / local / remote differences.
+
 ## Connect the IPSec tunnels
 Now you need to start the tunnel on the Initiator side first, then start the tunnel on the responder side.  If both sides show green status indicators, the tunnel should be active.