https://live.paloaltonetworks.com/t5/next-generation-firewall/ipsec-behind-nat/m-p/1223277#M5655 <P>Hi all,</P> <P>&nbsp;</P> <P>I am trying to enable a IPSEC from PA1 to PA2</P> <P>&nbsp;</P> <P>However PA1 sits behind a NAT device which I have no control of and the PA outside interface is been given a 192.16.1.X address</P> <P>&nbsp;</P> <P>I have gone through the following KB <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClopCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClopCAC</A> but this still fails to function. Seems like there is lack of documentation from PA side so just wondering if someone can break this down for me or point me in the right direction</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Sun, 09 Mar 2025 00:48:28 GMT rashhad.miah 2025-03-09T00:48:28Z https://live.paloaltonetworks.com/t5/next-generation-firewall/ipsec-behind-nat/m-p/1223277#M5655 <P>Hi all,</P> <P>&nbsp;</P> <P>I am trying to enable a IPSEC from PA1 to PA2</P> <P>&nbsp;</P> <P>However PA1 sits behind a NAT device which I have no control of and the PA outside interface is been given a 192.16.1.X address</P> <P>&nbsp;</P> <P>I have gone through the following KB <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClopCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClopCAC</A> but this still fails to function. Seems like there is lack of documentation from PA side so just wondering if someone can break this down for me or point me in the right direction</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Sun, 09 Mar 2025 00:48:28 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/ipsec-behind-nat/m-p/1223277#M5655 rashhad.miah 2025-03-09T00:48:28Z