About gswcowboy

You would only need to download the 6.0.0 base image and then proceed with a download and install of 6.0.3 soon thereafter. If you're seeing issues on your config, I usually run the following upon a reboot of a major PANOS. Upon completion of the reboot and autocom job has completed, go into configure mode of your device and perform the following. This may assist with any possible anomalies that crop up with the config xml file upon a major upgrade. admin@Lab11-PA3020> configure Entering configuration mode [edit] admin@Lab11-PA3020# commit force ....55%99%.....100% Configuration committed successfully admin@Lab11-PA3020# exit Exiting configuration mode ... View more

Hulk may have hit the head on the nail w/ respect to the PBF rule.      ... View more

if pan is not getting the s2c traffic back in return, perhaps vendor can provide logs/data(pcaps) related to the ike initiated traffic from your end to help w/ the analysis? ... View more

you could enable packet-diag filters and perhaps flow basic and pcaps to give some more granular insight(are we dropping packets, etc) but would err in the side of caution and do this during off peak hours. ... View more

confirm NAT-T is required and enabled. here's an excerpt log from another vendor where it wasn't supported. confirm if it's supported on their end. VPN IKE NAT Discovery : Peer IPSec Security Gateway doesn't support VPN NAT Traversal ... View more