LSVPN Portal connection Failed

R.Moth — Thu, 02 Oct 2025 12:30:55 GMT

We have around 500 sites and most of them are connected via LSVPN and a Site-2-Site VPN for backup. At somepoint the username for the portal connection has been changed which means all off the sites that are connected via LSVPN report that they have failed to connect to the portal.

My question is, if the NGF fails the Portal connection after it had been established and the peer sessions are still there will the NGF carry on using those established sessions? I'm asking as we had an issue with a HA Pair of NGF's, the LSVPN Portal connection was showing as failed but the sessions were showing as connected. The site-2-site VPN had also failed. So what I am trying to understand, will the NGF's carry on using the LSVPN if the Portal status reports as failed and the status of the site-2-site VPN is ignored as it is only being used as backup incase the LSVPN it self fails.

Richard

Re: LSVPN Portal connection Failed

TomYoung — Fri, 03 Oct 2025 14:27:21 GMT

Hi @R.Moth ,

Yes, the existing peer sessions will continue to work. The username and password is needed for initial establishment. After that, the portal (or hub) issues a certificate to the satellite, and the certificate is used for authentication. You can use the existing tunnels to connect to the management interface of the satellite and change the U/P. I would recommend it just in case something happens and it needs to reestablish the session.

Thanks,

Tom

topic Re: LSVPN Portal connection Failed in Next-Generation Firewall Discussions

LSVPN Portal connection Failed

Re: LSVPN Portal connection Failed