topic Re: How to make PA side as intiator for VPN with Azure in General Topics

How to make PA side as intiator for VPN with Azure

fatboy1607 — Wed, 14 Aug 2019 06:10:00 GMT

We want to make Palo Alto side as intiator for VPN with Azure .

Currently we have IKE settings as aes256,3des , sha1 sha256 and group 2 .

with lifetime less that azure standard 28800

still we are seeing PA acting as responder.

Basically issue is with PA is responder we are facing packet loss with azure resources.

below is article we reffered.

OtakarKlier — Thu, 15 Aug 2019 20:03:22 GMT

Hello,

I guess why would you want to? The responder has better diagnostic logging if there is an issue with the tunnel.

Regards,

MP18 — Mon, 19 Aug 2019 03:56:42 GMT

As per me we can only make PA as passive where it becomes responder.

Will see if option to make PA as initator is manually possible ?

fatboy1607 — Wed, 21 Aug 2019 09:33:27 GMT

we are seeing strange behaviour when palo alto act as responder we are seeing packet with resources on azure.

so looking for option if we can make PA side as initiator.