topic IKE traffic recognised as unkown-udp since September 6th in General Topics

IKE traffic recognised as unkown-udp since September 6th

santonic — Mon, 10 Sep 2018 08:01:37 GMT

Customer had an application based rule for VPN traffic. However since September 6th the traffic on UDP 500 is no longer recognised as IKE. Some VPNs stopped working, some still work even if they shouldn't really. Release notes of last 3 content updates don't mention anything about changes to IKE.

Anyone has similar problem?

Re: IKE traffic recognised as unkown-udp since September 6th

LukeBullimore — Mon, 10 Sep 2018 08:10:56 GMT

No issue at our end with a tunnel going from Palo -> Palo, what is at the other end terminating the IPSec tunnel?

Re: IKE traffic recognised as unkown-udp since September 6th

santonic — Mon, 10 Sep 2018 08:15:42 GMT

It's happening on all VPNs, so I'm assuming it's not due to the device on other end. PAN-OS 8.1.2 on my end.

Re: IKE traffic recognised as unkown-udp since September 6th

santonic — Mon, 10 Sep 2018 11:39:19 GMT

Upgrade to PAN-OS 8.1.3 solved the issue for now (or the reboot that came with it). Hopefully it won't come back.