Port 4500 ipsec/udp traffice

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L4 Transporter

the only thing I need to rule out is that it is being blocked by the PA and I am trying to find the best way to verify that

Highlighted
L7 Applicator

NO, It's not blocked by PAN. Your VPN gateway ( SonicWALL) is not accepting the IKE messages. The issue is not related to PAN.

Hope this helps.

Thanks

View solution in original post

Highlighted
L4 Transporter

Thats what I told the vendor what information from the PA would definitely show that its not being blocked by the PA

Highlighted
L4 Transporter

So the ike 500  that is being sent from the fortinet behind our PA has to be accepted by the 3rd party device for the 4500/ipsec/udp traffic/tunnel to be built

Highlighted
L7 Applicator

Yes,  You are absolutely correct.

Highlighted
L4 Transporter

Is there any information that can show the vendor that the PA is not blocking the traffice 500 or 4500?

Highlighted
L7 Applicator

Previously mentioned "session details"  will be enough to prove, PAN is not dropping the packet. Moreover, your vendor should know the working functionality of VPN in conjunction with NAT-T.

Thanks

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!