topic Re: LSVPN configuration Question in General Topics

LSVPN configuration Question

fatboy1607 — Wed, 19 Nov 2014 06:03:56 GMT

In order to register with the LSVPN, each satellite must establish an SSL/TLS connection with the portal. After

establishing the connection, the portal authenticates the satellite device to ensure that is authorized to join the

LSVPN..

Just want to understand what exactly packet exchange they do when satellite office authenticates with portal and gets config.

Thanks in advance.

Message was edited by: Mandar Kulkarni

Re: LSVPN configuration Question

sodhegba — Wed, 19 Nov 2014 06:58:51 GMT

The screenshot above is a packet capture when the Satellite establishes communication with the portal. Hope this is close to what you are looking for.

Regards,

Sylvester O.

Re: LSVPN configuration Question

fatboy1607 — Wed, 19 Nov 2014 07:11:46 GMT

this capture was taken from which device / interface.

Re: LSVPN configuration Question

hshah — Wed, 19 Nov 2014 14:34:35 GMT

Hi Madan,

Its a SSL connection, message exchange happens inside SSL connection. We dont have information for any PANW specific message exchanges.

Config is downloaded as SSL Data.

Regards,

Hardik Shah

Re: LSVPN configuration Question

kattaullah — Wed, 19 Nov 2014 17:28:06 GMT

Hello Mandar

This capture was taken on the Satellite device.

Satellite : 10.66.24.84

Gateway: 10.66.24.93

The capture in question was taken on the Palo alto device using the filters given in the screen shot below.

You should be able to see the exchange on the firewall stage packet capture.

Hope that helps.

Regards

Khan