Create a VPN to a Palo Alto Networks Firewall

Welcome to Ecessa Support, we have a variety of technical information and tools for a variety of solutions. If you aren't finding a solution, or would like to talk to a technical support team member, please call 800-669-6242.

See Ecessa's full line of products and solutions

Palo Alto Networks Configuration

  1. Create a IKE Crypto Profile.  Select DH Group 5, sha1 authentication, and aes-256-cbc encryption.
  2. Create an IKE Gateway.  Enter the Local IP Address of the Palo Alto Networks firewall and Peer IP Address of the Ecessa device you will be connecting to.  In the Advanced Options select the previously created IKE Crypto Profile and enable NAT Traversal if necessary.
  3. Create a IPSec Crypto Profile.  Select DH Group 5, sha1 authentication, and aes-256-cbc encryption
  4. Create an IPSec Tunnel.  Select the previously created IKE Gateway and IPSec Crypto Profile.

Ecessa Configuration

  1. Create an IPSec Site to Site VPN and fill in the local and remote endpoint IPs and the local and remote LAN Networks.  To route all traffic through the VPN enter the remote LAN network as
  2. Enable Dead Peer Restartvpn_dpd_restart.png
  3. On the Advanced tab of the VPN configuration enable PFS
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request


Please sign in to leave a comment.