topic IPsec tunnel PA-Forcepoint Up but no traffic passing through in Next-Generation Firewall Discussions

IPsec tunnel PA-Forcepoint Up but no traffic passing through

Bouthaina — Fri, 29 Mar 2024 11:11:34 GMT

Hi ,

I'm configuring an ipsec tunnel between PA-5410 (route based )and Forcepoint Firewall (policy based), and showing up but when i try to ping from LAN-to-LAN i could not recieve any trafic or logs . from system log,

""PSec key deleted. Deleted SA: 172........[500]-.............peer[500] SPI:0xA83E98C1/0x3D6DB38C.'"" and ( eventid eq 'ipsec-key-delete' )

Need to resolve this matter.

regards

Re: IPsec tunnel PA-Forcepoint Up but no traffic passing through

zGomez — Thu, 04 Apr 2024 13:39:51 GMT

Hi Bouthaina,

So both your Phase 1 and 2 are up?

Phase1

show vpn ike-sa gateway

Phase2

show vpn ipsec-sa

Can you find anything in our ikemgr.log? less mp-log ikemgr.log

Can you post also output of show vpn flow.

Is any of you upstream devices using NAT? Could be you need to enable nat-traversal .

Are your global counters revealing anything?

Are u using proxy-id's , you must be using them since it is policy based VPN.