Private Peer IP under IPSEC tunnel info

[Schneur_Feldman]

Can anyone please tell my why the firewall is showing a private IP under IPSEC TUNNELS -> Tunnel Info?

[BPry]

@Schneur_Feldman,

Stupid question, but should it be a public IP in your environment? If you have a private network setup between the firewalls you may not actually see a public IP due to an internal IP being utilized. It's a slightly abnormal configuration to use a tunnel over a private network, but there's nothing to say you can't and in some instances it can actually be beneficial. 

[Schneur_Feldman]

Hi BPry,

This is just a standard site to site Tunnel over the public Internet.

[Raido_Rattameister · Accepted solution]

This info comes from ProxyID field and shows SA remote peer subnet. Seems you clicked on "Tunnel info" under Network > IPSec Tunnels.