Hi, I just want to share a problem i have been troubleshooting. I have lots of vpn's terminating on our FW, haven't had real problems until i started to connect Azure VPN's. After a network hickup they usually did not come up again. I had the hardest time in finding out why. It seems that Azure sends so many IKE initiation packets that if for some reason (network hickup) we get a discard session in the session table it will allmost never get rid of this session by itself (i guess because the default session timout for udp discarding is 60 seconds and Azure sends an init at least 1 every 15 seconds.) So to get your vpn up and running again, go to sessions on the monitor pane, filter 'state eq discard', clear the session from your peer (should be port udp 500, and in my case the app was unknown-udp, that was the reason it started to discard in the first place). I am testing with a udp discard timout of 10 seconds now. Hope this helps some of you!
... View more