IPsec tunnel PA-Forcepoint Up but no traffic passing through

[Bouthaina]

Hi ,

I'm configuring an ipsec tunnel between PA-5410  (route based )and Forcepoint Firewall (policy based), and showing up but when i try to ping from LAN-to-LAN i could not recieve any trafic or logs . from system log,

 ""PSec key deleted. Deleted SA: 172........[500]-.............peer[500] SPI:0xA83E98C1/0x3D6DB38C.'""  and ( eventid eq 'ipsec-key-delete' )

Need to resolve this matter.

regards

[zGomez]

Hi Bouthaina,

So both your Phase 1 and 2 are up?

Phase1

show vpn ike-sa gateway

Phase2

show vpn ipsec-sa

Can you find anything in our ikemgr.log?  less mp-log ikemgr.log

Can you post also output of show vpn flow.

Is any of you upstream devices using NAT?  Could be you need to enable nat-traversal .

Are your global counters revealing anything?

Are u using proxy-id's , you must be using them since it is policy based VPN.