Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm going to replace a Sonicwall TZ 190 with a NSA 3500. Currently I have a Site to Site VPN setup on the TZ 190. I entered the exact information for the site-to-site VPN on the new NSA 3500, but I have not changed the "Unique Firewall Identifier" on the new device. Will this effect the Site to Site connection? Do I need to change the Unique Firewall Identifier on the NSA 3500 to the TZ 190 or is it OK if I leave this alone? What does the Unique Firewall Identifier effect?

share|improve this question
What protocol are you running? Sounds like IPSec? – Mark Henderson Dec 9 '10 at 0:10
You are correct. I think the identifier is only used for aggressive mode. – Jacob Dec 9 '10 at 17:03
up vote 0 down vote accepted

In general, as long as the VPN settings are identical at both locations, you should be okay. In previous generations of products, if the UFI didn't match the SA name on the remote end of the firewall, bad things happened. This has gone away since.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.