topic Re: IPSEC VPN Help? in General Topics

IPSEC VPN Help?

networkadmin — Sat, 17 Jul 2010 15:06:43 GMT

I have a PA-500 at our main office.

We have a smaller site that currently we have a point to point circuit to, however we may not renew the contract on this, and instead put in a cheaper but faster internet leased line, the idea being to link the two sites through a VPN tunnel.

The other site is too small to justify another PA-500, and I think "Plan A" would be to tunnel all traffic back through the main site.

My question is how simple IPSEC VPN is to configure with a non Palo Alto box at one end, and if it makes any difference what box is at the other end so long as it supports IPSEC VPN - is there anything that the Palo Alto doesn't get on with?

Thanks.

Re: IPSEC VPN Help?

swhyte — Mon, 19 Jul 2010 21:11:24 GMT

The paloalto device should work fine with any other ipsec vpn device as long as they adhere to the rfc.

thanks,

Stephen

Re: IPSEC VPN Help?

jpa — Tue, 27 Jul 2010 18:12:20 GMT

Most of the times, smaller devices use policy based IPSec VPN. In that case , make sure to configure proxy-ids on the PA side, since PA devices support only route based VPNs.