Store
 

What’s the difference between DPD and IKE Keep-Alive? - KH2333

Frequently Asked Questions

What’s the difference between DPD and IKE Keep-Alive?
 

DPD actively checks whether the remote VPN peer is still reachable and clears up stale tunnels. In contrast, IKE Keep-Alive is often a vendor-specific workaround to keep connections open, but it doesn't confirm if the peer is actually online.
For reliability, DPD is preferred and should not be used alongside IKE Keep-Alive unless your device specifically supports it.
Learn more about DPD in our blog: Dead Peer Detection Explained