-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
The log shows "Received Notify: No Proposal Chosen"
07/25/2023 
1,286 People found this article helpful
520,176 Views
Description
The log message "Received notify: No_Proposal_Chosen" indicates there is a mismatch of proposals during phase 1 or phase 2 negotiation between a site-to-site VPN.
Logs on Initiator
Resolution
The logs on the Responder SonicWall will clearly display the exact problem, ensure that the Proposals are identical on both the VPN policies.
Logs on Responder
Resolution for SonicOS 7.X
This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.
- Log into the SonicWall GUI.
- Click Network in the top navigation menu.
- Go to IPsec VPN | Rules and Settings and click the configure icon on to the appropriate VPN SA name.
- On the Proposals tab, make sure the IKE (Phase 1) proposal and IPSec (Phase 2) proposal is identical to the remote firewall.
NOTE: Make also sure the Perfect Forward Secrecy settings match on the local and remote firewall.
NOTE: In a Manual key configuration, the incoming SPI for the main site is the outgoing SPI for the remote site and vice versa.
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
- Log into the SonicWall GUI.
- Click Manage in the top navigation menu.
- Go to VPN | Base Settings and click the configure icon next to the appropriate VPN SA name.
- On the Proposals tab, make sure the IKE (Phase 1) proposal and IPSec (Phase 2) proposal is identical to the remote firewall. NOTE: Make also sure the Perfect Forward Secrecy settings match on the local and remote firewall.
NOTE: In a Manual key configuration, the incoming SPI for the main site is the outgoing SPI for the remote site and vice versa.
Related Articles
- How to Block Google QUIC Protocol on SonicOSX 7.0?
- How to block certain Keywords on SonicOSX 7.0?
- How internal Interfaces can obtain Global IPv6 Addresses using DHCPv6 Prefix Delegation
Categories
- Firewalls > NSa Series > VPN
- Firewalls > TZ Series > VPN
- Firewalls > NSsp Series > VPN
- Firewalls > NSv Series > VPN
YES
NO