topic Re: Replace ASA5505 with PA200 Teleworker in General Topics

Replace ASA5505 with PA200 Teleworker

JeffDBO — Thu, 23 Mar 2017 13:05:43 GMT

I have a remote user that's setup with an ASA5505 configured for teleworker. They move around and don't always have a static IP address at their locations. It's configured to call home to my ASA5540s and create the tunnel.

My question is if the PA200 has this capability to do the same back to my PA5050?

Re: Replace ASA5505 with PA200 Teleworker

BPry — Thu, 23 Mar 2017 13:33:32 GMT

Yes it does and infact it's probably far easier to setup on the PA-200 than on your 5505, or at least for me it is.

Re: Replace ASA5505 with PA200 Teleworker

JeffDBO — Thu, 23 Mar 2017 14:46:22 GMT

Thanks!

Do you happen to have a link to some resources I can read up on this?

Re: Replace ASA5505 with PA200 Teleworker

BPry — Mon, 27 Mar 2017 14:41:34 GMT

https://live.paloaltonetworks.com/t5/Configuration-Articles/IPSec-VPN-Tunnel-with-Peer-Having-Dynamic-IP-Address/ta-p/94161

This should get you going in the right direction. I can give you a direct configuration example if you need it just let me know. I imagine that your teleworker/remote office is not going to have a static IP?

Re: Replace ASA5505 with PA200 Teleworker

JeffDBO — Mon, 27 Mar 2017 14:45:09 GMT

Thanks!

You are correct. They have a dynamic IP from their provider.

Jeff