Resolved! IPSEC tunnel with vendor and using Vendor Public IP for Source Natting
We need to build the new IPSEC tunnel with the vendor.
Our side
PA Public IP say 200.23.23.x for IPEC tunnel
Our Lan
1>>10.0.0.0/8
2>>172.16.0.0/16
Vendor Juniper Public IP 104.156.166.x
Users on our side need to access the vendor network IP
1>>100.65.5.