Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
03-05-2018 02:07 AM
We have two vpn Palo Alto devices.
One in our HQ departement and one in a remote location.
I need to setup an IPSec VPN tunnel between these sites with the Palo Alto devices but I never did this before.
On the Palo Alto website I found this article which was helpfull https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-IPSec-VPN/ta-p/56535 but the devices does not connect with each other.
Also for our remote location I only want that the traffic to our servers go into the tunnel but internet traffic does not.
Second how can I configure to which server the clients of the remote sites can access?
I need to get al this to work on Wednesday.
03-05-2018 06:52 AM
I found the solution. It is something stupid.
I forgot to create policy rules which allows a connection from zone EXTERN to zone EXTERN with the application ipsec and ike.
03-05-2018 02:18 AM - edited 03-05-2018 02:19 AM
Hi Zebit,
What's the status of the VPN tunnel? Has it passed phase1-IKE? Can you ping the public IP of the remote site from the HQ firewall? and vice versa?
You can look on this article to have a basic troubleshooting on which part of your VPN setup is not working.
https://live.paloaltonetworks.com/t5/Featured-Articles/DotW-VPN-IPSec-Tunnel-Status-is-Red/ta-p/7922...
03-05-2018 02:33 AM
This article is a detailed troubleshooting on a VPN setup. It helped me solve most of my VPN issues. Check it, it may help you.
03-05-2018 06:52 AM
I found the solution. It is something stupid.
I forgot to create policy rules which allows a connection from zone EXTERN to zone EXTERN with the application ipsec and ike.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
