Tunnel interface gateway Health Check failed

Did you check under Administration- Device Access ICMP (Ping) for VPN?

Yes, both firewalls have this option checked.

Hi Rodrigo Silveira2,

Could you please ensure that the xfrm interface (VTI) subnet does not overlap on both firewalls? Let us know if that helps. 

Thanks,

Hello ,

They are not overlaped, I've checked on both firewalls.

Hi Rodrigo Silveira2,

As per the detail in your post, both xfrm interfaces are in the same network. Please change that and let us know how it turns out for you. 

Thanks,

I did it and now my Gateway is online, so I have to configure each firewall with a different network, in my case I have four different VTI for each Branch Office, so there will be four different networks for each Branch Office, right?

Hi Rodrigo Silveira2,

Thank you for the update. Yes, you would need to configure a unique network for xfrm interface that does not overlap with other connected sites. 

Thanks,

Hi Rodrigo Silveira2,

Thank you for the update. Yes, you would need to configure a unique network for xfrm interface that does not overlap with other connected sites. 

Thanks,