topic Re: IPSec Down - Question in Next-Generation Firewall Discussions

IPSec Down - Question

rodrigosantos — Tue, 07 Jan 2025 10:01:28 GMT

Hello,

I need help, my ipsec is always dropping at the same time
Estimated time is 7 minutes below.
This happens every day, from 9:08 am to 9:15 am.
This happens when we all get to work.

Thanks

Re: IPSec Down - Question

mshekh — Tue, 07 Jan 2025 14:57:50 GMT

Hi @rodrigosantos ,

Thanks for providing information, as per provided information, IPSEC dropped at the same time.

May I check which phase is going down during the time of issue. is it phase one or phase 2 and what logs do you see in system logs and ikemgr logs.

Additionally please refer the below doc to troubleshoot the issue as provided information is not enough to assist with exact steps.

How to Troubleshoot IPSec VPN connectivity issues

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClivCAC

Best Regards,

Mohammad Talib

Re: IPSec Down - Question

rodrigosantos — Wed, 08 Jan 2025 11:07:02 GMT

Hi @mshekh

The problem appears to be occurring mainly in Phase 1, as there are repeated attempts to establish an IKE association that fail (with the message "message for a non-existing ike_sa").

However, I saw that this message IKEv2 IKE SA is down determined by DPD also appears in the system logs

Best Regards

Re: IPSec Down - Question

mshekh — Thu, 09 Jan 2025 02:03:38 GMT

Hi @rodrigosantos ,

Please verify the connectivity as if you are seeing the DPD in system logs means, remote end is not responding. Please refer the below KB article for more details.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMqxCAE

Best Regards,

Talib

Re: IPSec Down - Question

rodrigosantos — Thu, 09 Jan 2025 17:44:07 GMT

Hi @mshekh

Is there any way to solve it?

Suggestions or something?

This is only happening when I connect to the server located on the main site as soon as I enter the service.
After 7 minutes everything works normally.

Regards,

Re: IPSec Down - Question

mshekh — Fri, 10 Jan 2025 05:36:38 GMT

Hi @rodrigosantos ,

Please open a case with support team for further assistance. As not sure why traffic stuck for 7 min only and after that it starts working. Support team will assist you with troubleshooting the issue.

Best Regards,

Mohammad Talib