topic Re: policy-based ipsec vpn in General Topics https://live.paloaltonetworks.com/t5/general-topics/policy-based-ipsec-vpn/m-p/40107#M29411 <HTML><HEAD></HEAD><BODY><P>What do you in your case mean by policy based ipsec vpn?</P><P></P><P>Can you bring an example?</P><P></P><P>Because the vpn terminated by this particular PA box will always have a (virtual) tunnel interface so the box knows if the traffic originates from within the vpn tunnel or not (the same way when the traffic will be sent out of the PA).</P></BODY></HTML> Wed, 05 Dec 2012 06:45:02 GMT mikand 2012-12-05T06:45:02Z policy-based ipsec vpn https://live.paloaltonetworks.com/t5/general-topics/policy-based-ipsec-vpn/m-p/40106#M29410 <HTML><HEAD></HEAD><BODY><P>i want to configure policy based IPSec vpn , in the administration guide i can see the steps for route-based IPsec VPN using tunnel interface , and directing the interesting traffic through the tunnel interface , nut i want to configure it without tunnel interface</P></BODY></HTML> Tue, 04 Dec 2012 22:07:59 GMT https://live.paloaltonetworks.com/t5/general-topics/policy-based-ipsec-vpn/m-p/40106#M29410 hany_ibrahim 2012-12-04T22:07:59Z Re: policy-based ipsec vpn https://live.paloaltonetworks.com/t5/general-topics/policy-based-ipsec-vpn/m-p/40107#M29411 <HTML><HEAD></HEAD><BODY><P>What do you in your case mean by policy based ipsec vpn?</P><P></P><P>Can you bring an example?</P><P></P><P>Because the vpn terminated by this particular PA box will always have a (virtual) tunnel interface so the box knows if the traffic originates from within the vpn tunnel or not (the same way when the traffic will be sent out of the PA).</P></BODY></HTML> Wed, 05 Dec 2012 06:45:02 GMT https://live.paloaltonetworks.com/t5/general-topics/policy-based-ipsec-vpn/m-p/40107#M29411 mikand 2012-12-05T06:45:02Z Re: policy-based ipsec vpn https://live.paloaltonetworks.com/t5/general-topics/policy-based-ipsec-vpn/m-p/40108#M29412 <HTML><HEAD></HEAD><BODY><P>i mean not routing the other end's subnet through the tunnel interface , and using the normal default route through the paloalto outside interface </P></BODY></HTML> Wed, 05 Dec 2012 07:57:21 GMT https://live.paloaltonetworks.com/t5/general-topics/policy-based-ipsec-vpn/m-p/40108#M29412 hany_ibrahim 2012-12-05T07:57:21Z