topic What tunnel options do you have for site-to-site using PA devices? in General Topics

What tunnel options do you have for site-to-site using PA devices?

mikand — Wed, 07 Sep 2016 17:08:32 GMT

IPsec is the obvious one but lets say you have already taken care of the protection of the traffic, I failed to see if the PA devices for example supports GRE tunneling (basically for performance reasons I would just like the tunneling itself, not the encryption).

If not, any of you who might know if GRE (or similar) is even on some kind of roadmap?

Re: What tunnel options do you have for site-to-site using PA devices?

bmorris1 — Thu, 08 Sep 2016 09:05:34 GMT

Hi,

The PAN firewall only supports IPSec for site-to-site, IKEv1 & v2 & you can change the IPSec protocol to AH from ESP. For LSVPN/Global Protect you can use an SSL tunnel.

I do not know if GRE is on the road map, you would need to speak with the PAN systems engineers.

hope this helps,

Ben