VPN tunnel through Palo Alto

wolverine84601

I recently setup a Palo Alto firewall and tried to setup an open vpn tunnel through it. The VPN tunnel initially would not come up in UDP, but after we switched to TCP, it came up fine. We could ping through the tunnel and UDP traffic appeared to pass through just fine. When we tried to make TCP connections however (ssh or connections to mysql 3306) they failed.

I would be grateful for any help on this issue.

Thanks

zawmn83

Any solution on this issue? I also got same problem.

rob.s

Hallo,

any solution now? PA is inactive because of this issue and several TCP based OpenVPN based tunnels. PA is in virtual wire mode. PA has current OS 6.0.8

Thanks!

rob.s

we've found our solution: we had asymmetric routes, so the PA was only able to see one part of the traffic. Changing the way of routing solved our issue.