GRE support on PAN-OS 8.0

[sst]

Hi,

is it possible to terminate a GRE tunnel on a PaloAlto? Parhaps there is something new in 8.0

Best regrads,

Sebastian

[kiwi]

Hi @sst,

Nope the firewalls don’t terminate GRE, non-encrypted IPSec, or GTP-U tunnels. 

As documented here :

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/networking/tunnel-content-inspection

Cheers !

-Kiwi.

[9t89m8fu]

Slightly off-topic, but Palo Altos can in fact terminate non-encrypted IPSec. Both AH and null-encryption ESP are supported in PAN-OS 8.0.

[OtakarKlier]

Hello All,

Just curious, why would a GRE tunnel be favored over a non-encrypted one?

Not trying to stir anything up, just asking.

Regards,

[JoeAndreini]

Maybe the far end does not have the hardware to support encryption?  Just a guess at one possible reason.

I once had a tunnel to Verizon Wireless for an M2M solution and they specified GRE, would not or could not do IPSEC.

[OtakarKlier]

Hello Joe,

That makes sense.

Thanks!