PA200 Android IKEv2/IPSEC PSK

Kublach — Sat, 20 Jan 2024 17:56:49 GMT

Hi everyone,

I received an old Palo Alto PA200 firewall from a friend who works in networking, and I decided to set it up in my home lab to explore its interface and features. If I like how it performs, especially the monitoring capabilities, I might suggest purchasing it for the company where I work. Currently, I'm trying to establish an IPsec connection between an Android smartphone and the PA200, but I'm facing difficulties. I've attempted various configurations without success. In PaloAlto documentation, I found that this should be done through GlobalProtect Gateway with XAuth enabled. However, XAuth has been unavailable on Android for the past two years.

Is there a combination or workaround to set up a VPN on Android without XAuth? Oh, I forgot to mention, since the device was gifted to me and has been out of support for a while, I don't have a GlobalProtect license.

Re: PA200 Android IKEv2/IPSEC PSK

kiwi — Mon, 22 Jan 2024 10:18:26 GMT

Hi @Kublach ,

Using the GP app for Android is a way ... which unfortunately requires a gateway license:

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses

I haven't tested it myself but there are ways to get older Android versions which might work for your testing:
https://developer.android.com/about/versions/10/get

https://developer.android.com/about/versions/11/get

Kind regards,

-Kim.

topic Re: PA200 Android IKEv2/IPSEC PSK in General Topics

PA200 Android IKEv2/IPSEC PSK

Re: PA200 Android IKEv2/IPSEC PSK