What tunnel options do you have for site-to-site using PA devices?

[mikand]

IPsec is the obvious one but lets say you have already taken care of the protection of the traffic, I failed to see if the PA devices for example supports GRE tunneling (basically for performance reasons I would just like the tunneling itself, not the encryption).

If not, any of you who might know if GRE (or similar) is even on some kind of roadmap?

[bmorris1]

Hi,

The PAN firewall only supports IPSec for site-to-site, IKEv1 & v2 & you can change the IPSec protocol to AH from ESP. For LSVPN/Global Protect you can use an SSL tunnel.

I do not know if GRE is on the road map, you would need to speak with the PAN systems engineers.

hope this helps,

Ben