Hi all,

Since upgrading our 2927's to FW 4.4.5 a lot of our routers are dropping their IPsec VPN tunnels frequently throughout the day.

One router in particular drops all 7 tunnels at the same time and then reconnects them almost instantly, other routers seem to drop particular tunnels throughout the day. This has only been since upgrading our 2927's to the latest 4.4.5 FW.

We have 6 x 2927's and 1 x 3910. We used to have frequent drops on our 2927's prior to the 3910 FW release of 4.3.2.6, but only when there was little to no traffic (so would often see drops over a weekend) . Since upgrading our 3910 to 4.3.2.6 back in February these drops stopped.

Now we are seeing random drops on our 2927's since upgrading them to FW 4.4.5 I am wondering if it's once again an issue with the 3910, or an issue with IPSec generally on the 4.4.5 FW?

Anyone else seeing anything similar on their 2927's?

Not using the VPN myself but there is a thread on other 4.4.5 issues - https://forum.draytek.co.uk/viewtopic.php?t=25184

Thank you for your reply, although nothing related to VPN in that topic that I could see, people clearly seem to be having other issues with this latest 4.4.5 FW release.

Ideally I would like to revert back to the previous FW but because of this https://www.draytek.com/about/security-advisory/information-disclosure-vulnerability-(cve-2024-23721) we can't. I guess we'll have to hope Draytek both see and act on these complaints/issues, and release updated FW soon!

I suspect Draytek don't read this forum - indeed, it seems as though the admins here only visit on rare occasions. Do we get the feeling that the new firmware was rushed out to fix a security issue without being throroughly tested for other problems?

We are now having the same issue with a 2927 router, drops all Lan to Lan VPNs every few minutes.
I have downgraded firmware to 4.4.2.2 but issue is still happening.
I have changed this out for a 2862 and issue has gone away.
We have had multiple different issues now with numerous 2927 routers and don't think we can use them any more.