topic Re: IPSec VPN from PA to Edge gateway in General Topics

IPSec VPN from PA to Edge gateway

jdprovine — Wed, 26 Sep 2018 20:40:06 GMT

Is it possible to an IPSec VPN connection from a PA 5050 to t Edge gateway appliance and if so how is it done

Re: IPSec VPN from PA to Edge gateway

reaper — Thu, 27 Sep 2018 08:53:50 GMT

The description is a little vague, what is the edge gateway appliance exactly? (is it a router or a modem, does it support ipsec,..?)

Assuming it is a (mainstream) router it would be set up in pretty much the same way you'd set up a VPN tunnel to a remote peer

-ike properties and crypto map

-ipsec properties and crypto map

-proxyIDs if the peer uses policy based vpn configuration

Re: IPSec VPN from PA to Edge gateway

jdprovine — Thu, 27 Sep 2018 12:05:37 GMT

@reaper

I just found out about it in our vendors documentation and I think its this

https://www.youtube.com/watch?reload=9&v=eZo3eVGD5Wc

Re: IPSec VPN from PA to Edge gateway

reaper — Thu, 27 Sep 2018 13:05:12 GMT

At 4:05 he mentions they support ipsec VPN, so that's great 😄

he does note that the vpn needs to be from the ESG to the firewall, but that doesn't matter much in the bigger picture (this is actually a good thing for troubleshooting)

here's a little video they created on how to set up VPN on their end, our end will look the same as any other remote-peer vpn: https://youtu.be/v8BDczWuPsc

It looks like theyre defining local subnets, so you'll probably need to reproduce that on your firewall by setting proxyIDs

Re: IPSec VPN from PA to Edge gateway

jdprovine — Thu, 27 Sep 2018 13:09:18 GMT

@reaper

I will check out your video and I was thinking we would need proxy ID's, We are trying to set up access for Virtual desktops cloud services via VPN

Re: IPSec VPN from PA to Edge gateway

jdprovine — Thu, 27 Sep 2018 13:26:06 GMT

@reaper

good video but a little hard to see with my old eyes