Application issues Via VPN with Peer

Light-Regions — Wed, 01 Nov 2017 10:15:54 GMT

Hi Guys,

I need some help dealing with CyberAck over VPN. The problem is that I created and established a VPN with a remote peer for CyberAck traffic. Service is Any but application is default. Traffic is allowed via the firewall but I get an error (tcp-rst-from-server) on both sides or server and client. Cyberack uses TCP ports 4118, 4119, 4120 which I custom created. This did not work so I set the service to any and application to default and still get the same error - tcp-rst-from-server.

But when I set the application to Any and service to Any, everything works fine. And this defeats my reason for a firewall in the first place. Monitoring the rule in action, I noticed that service is coming and going as 4120, 4118 etc and application is set to SSL. This is obviously not a default SSL so hence failing. I think what happens is this - https://10.10.10.25:4118.

Does anyone know how I can overcome this problem?

Any help will be much appreciated.

Re: Application issues Via VPN with Peer

gwesson — Wed, 01 Nov 2017 16:32:43 GMT

You'll need to create an application override policy to force that traffic to the application(s) you created. Here are the steps:

https://live.paloaltonetworks.com/t5/Learning-Articles/Tips-amp-Tricks-How-to-Create-an-Application-Override/ta-p/65513

topic Application issues Via VPN with Peer in General Topics

Application issues Via VPN with Peer

Re: Application issues Via VPN with Peer