NGFW PALO ALTO and Azure VPN Ipsec Issue

BrajeshPatel — Mon, 07 Mar 2022 18:46:29 GMT

Hi All,

We had observed an issue with Palo Alto and Azure vWAN IPsec tunnel. the Tunnel seems disconnected and getting following log messages time and again.

2022-03-07 11:48:14.506 -0600 [PWRN]: 50.100.100.100[500] - 152.100.101.105[500]:0x1c787140 unknown ikev2 peer

2022-03-07 11:54:17.013 -0600 [PERR]: { 4: }: 50.100.100.100[500] - 152.152.152.100[500]:(nil) retransmission count exceeded the limit
2022-03-07 11:54:17.013 -0600 [INFO]: { 4: }: 50.100.100.100[500] - 152.152.152.100[500]:(nil) closing IKEv2 SA IKE_Gateway:537, code 5
2022-03-07 11:54:18.344 -0600 [PNTF]: { 4: }: ====> IKEv2 IKE SA NEGOTIATION STARTED AS INITIATOR, non-rekey; gateway IKE_Gateway <====

Any suggestion Pls ?

Re: NGFW PALO ALTO and Azure VPN Ipsec Issue

kiwi — Thu, 10 Mar 2022 10:55:21 GMT

Hi @BrajeshPatel ,

Maybe this KB article can help you with this:

VPN Failing with Error 'Unknown ikev2 peer'

Hope this helps,

-Kiwi.

topic Re: NGFW PALO ALTO and Azure VPN Ipsec Issue in Next-Generation Firewall Discussions

NGFW PALO ALTO and Azure VPN Ipsec Issue

Re: NGFW PALO ALTO and Azure VPN Ipsec Issue