topic Re: Point to site VPN on pan 0S 11+ (Client to remote VPN server) in General Topics

Point to site VPN on pan 0S 11+ (Client to remote VPN server)

din100 — Mon, 05 Feb 2024 11:39:32 GMT

I remember reading some where Palo Alto firewalls works like a client to access remote VPN servers

eg I can setup the PALO to access a OpenVPN server and give access to user on my palo managed local network to access that remote resource, than user installing the OpenVPN application on their computer and connecting.

Hope I'm making any sense. all I need is a location on the Palo docs I can't seems to find it. I pretty sure I read that,

Thank you in advance

Re: Point to site VPN on pan 0S 11+ (Client to remote VPN server)

reaper — Mon, 05 Feb 2024 11:57:12 GMT

OpenVPN users are able to connect to a GlobalProtect gateway as a 3rd party vpn client

The Palo firewall cannot connect to openvpn as it (openvpn) does not support IPSec

if your users need to connect to an openvpn server, you'll need to set a security rule allowing these connections from the users to the remote server

Re: Point to site VPN on pan 0S 11+ (Client to remote VPN server)

din100 — Mon, 05 Feb 2024 12:01:34 GMT

Thank you forget the openvpn server I said that as an example.

If the end vpn-server supports IPSec connection then can I use Palo to connect ? like azure point to site VPN ? I want to know where you configure this setting.

All the docs I find are for site to site connection

Re: Point to site VPN on pan 0S 11+ (Client to remote VPN server)

reaper — Mon, 05 Feb 2024 14:31:44 GMT

the palo firewall can only connect to a peer using traditional IPSec connections, it cannot act as a P2S client