Port 4500 ipsec/udp traffice

[infotech]

How do I check to see it the PA is dropping port 4500 traffic?

[infotech]

the only thing I need to rule out is that it is being blocked by the PA and I am trying to find the best way to verify that

[HULK · Accepted solution]

NO, It's not blocked by PAN. Your VPN gateway ( SonicWALL) is not accepting the IKE messages. The issue is not related to PAN.

Hope this helps.

Thanks

[infotech]

Thats what I told the vendor what information from the PA would definitely show that its not being blocked by the PA

[infotech]

So the ike 500  that is being sent from the fortinet behind our PA has to be accepted by the 3rd party device for the 4500/ipsec/udp traffic/tunnel to be built

[HULK]

Yes,  You are absolutely correct.

[infotech]

Is there any information that can show the vendor that the PA is not blocking the traffice 500 or 4500?

[HULK]

Previously mentioned "session details"  will be enough to prove, PAN is not dropping the packet. Moreover, your vendor should know the working functionality of VPN in conjunction with NAT-T.

Thanks