Ike Scan Against GlobalProtect Gateway

jeff6strings — Thu, 08 Jul 2021 16:00:06 GMT

I'm testing (starting) my ethical hack skills and testing our GlobalProtect Gateways for vulnerabilities.

I used the Windows ike-probe and Kali Linux ike-scan against a Cisco gateway with VPN services running. The ike-scan results are what I expected in receiving a response or acknowledgment of 1 returned handshake with the available ciphers. The ike-probe results were expected as well, with recv_notify on most ciphers.

I ran the same scans against a Palo Alto GlobalProtect Gateway with Portal and Gateway configured. This Gateway is working with GlobalProtect clients in IPSec mode and default settings. The ike-scan and ike-probe results are negative as compared to the Cisco gateway.

Is the Palo Alto Gateway more secure? Am I missing a command option with both scans?

Appreciate any help.

Jeff

Re: Ike Scan Against GlobalProtect Gateway

reaper — Thu, 15 Jul 2021 12:52:05 GMT

Globalprotect is an SSL based portal structure that uses SSL to negotiate connectivity. only after a user is connected will the agent switch to ipsec, so there is no regular IKE to this setup

if you want to scan ike/ipsec, create an ike gateway and vpn tunnel object on the interface

topic Re: Ike Scan Against GlobalProtect Gateway in General Topics

Ike Scan Against GlobalProtect Gateway

Re: Ike Scan Against GlobalProtect Gateway