Cisco ASA and Palo Alto 820 with multiple Proxy-ID

LCMember2099 — Mon, 25 Mar 2019 19:57:18 GMT

Trying to replace a site to site VPN Cisco ASA firewall with Palo Alto PA-850. Cisco ASA on this side has multiple ACLs configured which is equivalent to Proxy-IDs. It is configued with IKEv1, policy based, no IKEv2. I do not have access to the firewall on the other side.

I have multiple Proxy-IDs configured on the PA and matched with the existing Cisco ACLs. Phase 1 comes up but fails on Phase 2.

What are the CLI commands to see what both Palo Alto and Cisco are seeing for the ProxyIDs?

Re: Cisco ASA and Palo Alto 820 with multiple Proxy-ID

OtakarKlier — Mon, 25 Mar 2019 21:19:21 GMT

Hello,

Check out this article, it might help out as is maps the different fields.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClE6CAK

Regards,

topic Re: Cisco ASA and Palo Alto 820 with multiple Proxy-ID in General Topics

Cisco ASA and Palo Alto 820 with multiple Proxy-ID

Re: Cisco ASA and Palo Alto 820 with multiple Proxy-ID