IPSEC VPN Help?

[networkadmin]

I have a PA-500 at our main office.

We have a smaller site that currently we have a point to point circuit to, however we may not renew the contract on this, and instead put in a cheaper but faster internet leased line, the idea being to link the two sites through a VPN tunnel.

The other site is too small to justify another PA-500, and I think "Plan A" would be to tunnel all traffic back through the main site.

My question is how simple IPSEC VPN is to configure with a non Palo Alto box at one end, and if it makes any difference what box is at the other end so long as it supports IPSEC VPN - is there anything that the Palo Alto doesn't get on with?

Thanks.

[swhyte]

The paloalto device should work fine with any other ipsec vpn device as long as they adhere to the rfc.

thanks,

Stephen

[jpa]

Most of the times, smaller devices use policy based IPSec VPN. In that case , make sure to configure proxy-ids on the PA side, since PA devices support only route based VPNs.