08-13-2019 11:10 PM
We want to make Palo Alto side as intiator for VPN with Azure .
Currently we have IKE settings as aes256,3des , sha1 sha256 and group 2 .
with lifetime less that azure standard 28800
still we are seeing PA acting as responder.
Basically issue is with PA is responder we are facing packet loss with azure resources.
below is article we reffered.
08-15-2019 01:03 PM
Hello,
I guess why would you want to? The responder has better diagnostic logging if there is an issue with the tunnel.
Regards,
08-18-2019 08:56 PM
As per me we can only make PA as passive where it becomes responder.
Will see if option to make PA as initator is manually possible ?
08-21-2019 02:33 AM
we are seeing strange behaviour when palo alto act as responder we are seeing packet with resources on azure.
so looking for option if we can make PA side as initiator.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
