PaloAlto PA440 to SG230 site-2-site IPSEC VPN

Question

Hello, 
 I tried to setup a tunnel following some recommendations from the community forum but it did not work. Anybody has a working configuration? 
 
 Sincerely, 
 Alex

Alex Suslik · Accepted Answer

ok, tunnel is up 
 on PaloAlto side in IPSEC Crypto authentication should be set to none.

Vivek Jagad · Answer

Hey Alex Suslik , thank you for the update, we do not have a pocket guide/best practice for UTM 9.7 to PAN OS. But we definitely have a guide between our next gen FW to PAN OS . And again UTM 9 only supports IKev1 where as next gen supports IKev2 Parameters as well. You may configure a Site-to-site IPsec tunnel by referring the KBA - https://support.sophos.com/support/s/article/KB-000036832?language=en_US Just ensure the parameters configured on the PAN OS should be matching with one configured on the UTM 9.

PaloAlto PA440 to SG230 site-2-site IPSEC VPN

Top Replies