0

I'm trying to build a Microsoft Azure site-to-site vpn where the local end device is a Palo Alto Networks firewall.

I have been trying to follow the example shown here ....

https://live.paloaltonetworks.com/t5/Integration-Articles/Configuring-IKEv2-VPN-for-Microsoft-Azure-Environment/ta-p/60340

But I'm not having any luck establishing a connection.

Has anyone successfully established a connection with a Palo Alto firewall?

Kind regards

Carlton

1

Palo Alto is compatible, but you may have an OS version which is not compatible with RouteBased configuration.

Make sure you have a compliant appliance:

PAN-OS 6.1.5 or later (PolicyBased)

PAN-OS 7.0.5 or later (RouteBased)

If your router does not support RouteBased configuration, recreate Azure VPN Gateway as PolicyBased. That should fix the problem.

Bear in mind that PolicyBased is 1-1, i.e, you will not be able to use Azure as a VPN hub for several office branches.

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-about-vpn-devices/

| improve this answer | |
  • Bruno, thanks for responding. I have the document you suggested. I was wondering if anyone had successfully configured Palo Alto as vpn to an Azure VPN – Carltonp Oct 27 '16 at 12:28
  • Palo Alto is compatible with both VPN models in Azure. I've successfully connected my customers to Azure through it without any issues. Please, be more specific to the problem you are facing. – Bruno Faria Oct 27 '16 at 12:30
  • Is the the following link enough to successfully setup the Palo Alto as a gateway to Azure – Carltonp Oct 27 '16 at 12:38
  • I don't have one now to replicate but seems to have everything you need. – Bruno Faria Oct 27 '16 at 12:40
  • Bruno, thanks again for responding. It's a pity you don't have one to replicate. Do you know where I could find a replication? Cheers – Carltonp Oct 27 '16 at 12:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.