14. Palo Alto Routing between IPSEC VPN and GlobalProtect and ASA5520

preview_player
Показать описание
#Palo Alto
Network - IPSec Tunnels - Proxy IDs
Local 192.168.254.0/24 Remote 10.63.251.0/24

Security
1. Source Zone - VPN
Destination Zone - SiteVPN
2. Source Zone - SiteVPN
Destination Zone - VPN

Check Split tunnel in GlobalProtect Gateways

#CISCO ASA5520
access-list paloalto extended permit ip object 10.63.251.0 192.168.254.0 255.255.255.0
Рекомендации по теме