PaloAlto to Watchguard Site to Site connects but passes no traffic to parts of the Watchguard site.

ScottLenninger — Thu, 07 Mar 2024 13:05:15 GMT

Looking to see if anyone has come across this issue. We have setup a site-to-site tunnel to another location. We have a PA460 running 10.7.h3 and the other location uses a watchguard firewall with NetMotion for their Vpn clients. When we connected, the clients running NetMotion can't reach applications or the local network can't, this depends on if we use the BOVPN integration guide or the BOVPN virtual interface guide.

https://www.watchguard.com/help/docs/help-center/en-US/Content/Integration-Guides/General/Palo_Alto_BOVPN.html

https://www.watchguard.com/help/docs/help-center/en-US/Content/Integration-Guides/General/Palo_Alto_BOVPN_virtual_interface.html?tocpath=Self-Help%20Tools%7CIntegration%20Guides%7CFireware%7C_____76

Tunnels come up and show no drops on our side. Looking for some assistance as where to look.

Re: PaloAlto to Watchguard Site to Site connects but passes no traffic to parts of the Watchguard site.

OtakarKlier — Thu, 07 Mar 2024 21:53:32 GMT

Hello,

I would ensure you have logging enabled and check the logs to see why/where the traffic is getting dropped. Guessing either routing or security policies.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh5CAC

Regards,

topic Re: PaloAlto to Watchguard Site to Site connects but passes no traffic to parts of the Watchguard site. in Next-Generation Firewall Discussions

PaloAlto to Watchguard Site to Site connects but passes no traffic to parts of the Watchguard site.

Re: PaloAlto to Watchguard Site to Site connects but passes no traffic to parts of the Watchguard site.