About dtran

I am trying to setup site-2-site VPN between a Cisco router and PaloAlto 820 running 8.1.9HF4.  Everything is working fine in IKEv1 but it is not working in IKEv2.  Look like PaloAlto is not playing nice with Cisco devices.  If I replace the PaloAlto with Checkpoint firewall, it works fine with Cisco in IKEv2.     I have a ticket open with PaloAlto TAC and they are investigating but TAC is moving very slow and I need to get it working in the next 48 hours.  PAN TAC engineer told me that there are lot of issues with PAN IKEv2 and 3rd party vendors like Cisco.   Anyone able to to get IKEv2 working between PAN and Cisco without any issues? ... View more

I have a PaloAlto PA-200 with very simple configuration. I configure the PA-200 Management interface to get update the Antivirus, Threats, WildFire and URL Filtering. The proxy server is Cisco scansafe. I can update software, dynamic updates, license everything through the proxy server from the PAN-200 with the Exception of of the PAN-DB for URL filtering. Every time I tried to update the PAN-DB, I get this message: Please select a region to begin the download process 2016-04-16 13:00:17 PAN-DB download: Finished with failure url-download-failure 'The download file for region North-America md5sum check failed Btw, it happens for ALL regions, North America, APAC, Japan, Russia. Not sure what else to do from here? TAC engineer is not very helpful here. Anyone know how to fix this? ... View more