topic Re: GRE support on PAN-OS 8.0 in General Topics

GRE support on PAN-OS 8.0

sst — Wed, 29 Aug 2018 13:45:27 GMT

Hi,

is it possible to terminate a GRE tunnel on a PaloAlto? Parhaps there is something new in 8.0

Best regrads,

Sebastian

kiwi — Wed, 29 Aug 2018 14:53:13 GMT

Nope the firewalls don’t terminate GRE, non-encrypted IPSec, or GTP-U tunnels.

As documented here :

Cheers !

-Kiwi.

9t89m8fu — Thu, 30 Aug 2018 13:01:55 GMT

Slightly off-topic, but Palo Altos can in fact terminate non-encrypted IPSec. Both AH and null-encryption ESP are supported in PAN-OS 8.0.

OtakarKlier — Thu, 30 Aug 2018 13:38:18 GMT

Hello All,

Just curious, why would a GRE tunnel be favored over a non-encrypted one?

Not trying to stir anything up, just asking.

Regards,

JoeAndreini — Fri, 31 Aug 2018 11:11:06 GMT

Maybe the far end does not have the hardware to support encryption? Just a guess at one possible reason.

I once had a tunnel to Verizon Wireless for an M2M solution and they specified GRE, would not or could not do IPSEC.

OtakarKlier — Fri, 31 Aug 2018 16:37:31 GMT

Hello Joe,

That makes sense.

Thanks!