VPN: Site to Site and Remote Access PaloAlto PA440 to SG230 site-2-site IPSEC VPN

UTM Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 10 replies
Answers 1 answer
Subscribers 4 subscribers
Views 3437 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PaloAlto PA440 to SG230 site-2-site IPSEC VPN

Alex Suslik over 1 year ago

Hello,

I tried to setup a tunnel following some recommendations from the community forum but it did not work. Anybody has a working configuration?

Sincerely,

Alex

This thread was automatically locked due to age.

Top Replies

Alex Suslik over 1 year ago in reply to Alex Suslik +2 verified

ok, tunnel is up on PaloAlto side in IPSEC Crypto authentication should be set to none.

Parents

0 Alex Suslik over 1 year ago

SG230 firmware version 9.712-13

PA440 software version 10.1.6-h6
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Alex Suslik

Hey Alex Suslik , thank you for the update, we do not have a pocket guide/best practice for UTM 9.7 to PAN OS. But we definitely have a guide between our next gen FW to PAN OS. And again UTM 9 only supports IKev1 where as next gen supports IKev2 Parameters as well. You may configure a Site-to-site IPsec tunnel by referring the KBA - https://support.sophos.com/support/s/article/KB-000036832?language=en_US
Just ensure the parameters configured on the PAN OS should be matching with one configured on the UTM 9.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad over 1 year ago in reply to Alex Suslik

Hey Alex Suslik , thank you for the update, we do not have a pocket guide/best practice for UTM 9.7 to PAN OS. But we definitely have a guide between our next gen FW to PAN OS. And again UTM 9 only supports IKev1 where as next gen supports IKev2 Parameters as well. You may configure a Site-to-site IPsec tunnel by referring the KBA - https://support.sophos.com/support/s/article/KB-000036832?language=en_US
Just ensure the parameters configured on the PAN OS should be matching with one configured on the UTM 9.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data