topic Re: H.323 & ipsec VPN in General Topics https://live.paloaltonetworks.com/t5/general-topics/h-323-ipsec-vpn/m-p/27204#M19846 <HTML><HEAD></HEAD><BODY><P>Check your traffic logs on PAN as well as NetScreen sides (assuming you have logging enabled on your policies). Note that if you only enabled logging at session end then you will need to wait for the session to close before you will see a log entry. So for debugging you may want to temporarily also enable logging at session start. If all traffic is permitted in both directions then you should see the traffic on both sides of the tunnel and perhaps can isolate accordingly.</P><P></P><P>If you still cannot see any H323 and subsequent rtp/rtcp session traffic, then I would suggest to contact PA support of your partner support to troubleshoot.</P><P></P><P>-Richard</P></BODY></HTML> Thu, 08 Sep 2011 06:15:02 GMT Retired Member 2011-09-08T06:15:02Z H.323 & ipsec VPN https://live.paloaltonetworks.com/t5/general-topics/h-323-ipsec-vpn/m-p/27203#M19845 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>I'm having problems getting H.323 traffic over ipsec vpn, is this not possible?</P><P>It's a standard ipsec vpn tunnel, everything is allowed both ways.</P><P>Everything else works over the tunnel.</P><P></P><P>The setup is with a PA-500 in my end and a netscreen firewall in the opposite end.</P><P></P><P>Jo Christian</P></BODY></HTML> Tue, 06 Sep 2011 09:23:07 GMT https://live.paloaltonetworks.com/t5/general-topics/h-323-ipsec-vpn/m-p/27203#M19845 jochristian 2011-09-06T09:23:07Z Re: H.323 & ipsec VPN https://live.paloaltonetworks.com/t5/general-topics/h-323-ipsec-vpn/m-p/27204#M19846 <HTML><HEAD></HEAD><BODY><P>Check your traffic logs on PAN as well as NetScreen sides (assuming you have logging enabled on your policies). Note that if you only enabled logging at session end then you will need to wait for the session to close before you will see a log entry. So for debugging you may want to temporarily also enable logging at session start. If all traffic is permitted in both directions then you should see the traffic on both sides of the tunnel and perhaps can isolate accordingly.</P><P></P><P>If you still cannot see any H323 and subsequent rtp/rtcp session traffic, then I would suggest to contact PA support of your partner support to troubleshoot.</P><P></P><P>-Richard</P></BODY></HTML> Thu, 08 Sep 2011 06:15:02 GMT https://live.paloaltonetworks.com/t5/general-topics/h-323-ipsec-vpn/m-p/27204#M19846 Retired Member 2011-09-08T06:15:02Z