Paloalto to Firebox

[twhite]

Any know issues with an ipsec VPN connection between a PA-500 to a Watchguard Firebox?

[networkadmin]

I know this isn't a direct and particularly useful answer, but I've recently setup a VPN with both a McAfee/Secure Computing Sidewinder, and with a Juniper SSG ScreenOS device, and on the PAN side of things I simply followed their guide and to my surprise (as someone who hasn't played with VPN's much) it pretty much worked fine first time - so unless the Firebrick does something weird I don't see you should have any problem.

[odaos · Accepted solution]

Hello, there is no known issues with setting up Watchgaurd with the PaloAlto device.  You should be able to set it up with the PAN device.

Regards,

Oliver

[Arrowsight]

I recently encountered issue connecting to firebox as well, and from the system log in PA, it show no proposal chosen.  We then disabled PFS and the tunnel came up with no issue. Hope this helps.

[rmonvon]

I documented the IPSec configuration between Palo Alto F/W and Watchguard's while running version PAN-OS 2.0.  The configuration should work with later OS release.  Please use this as a reference.