Download as PDF, PPTX
multi vendor VPN NGF UTM untuk setting vpn
- 1. PaloAlto LAB ByRiaz Gul Palo Alto Site to Site VPN Cisco IOS Routers Fortinet FortiGate Sophos NGFW
- 2. This LAB demonstratehow to configure Site- to-Site VPN between Palo Alto Firewalls and other vendor firewalls, including Fortinet, Cisco IOS Routers and Sophos NGFW. PaloAlto LAB What to do ? By Riaz Gul IKE v1 & IKE v2
- 3. LAB Environment PNETLab ver4.2.10 Palo Alto Firewall 11.2.0 SophosXG 20.0.0 Firewall Fortinet Fortigate OS 7.2 Mikrotik Router OS PaloAlto LAB By Riaz Gul
- 4. LAB Topology PaloAlto LABBy Riaz Gul
- 5. Pre-Requisites PaloAlto LAB Basic IPConfiguration on Interfaces Routing, WAN to WAN Reachability Here we are not showing end to end configuration for LAB devices. Therefore, you need to have environment ready for VPN connectivity. So only showing VPN configurations. By Riaz Gul
- 6. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router This section showing the configuration for IPSec VPN between Palo Alto Firewall and Cisco IOS Router By Riaz Gul
- 7. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto IKE Crypto Profile Define IKE Crypto Profile, usually called the Phase 1 of IPSec VPN By Riaz Gul
- 8. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto IPSec Crypto Profile Define IPSec Profile, usually called the Phase 2 of IPSec VPN or also called as Transform Set. By Riaz Gul
- 9. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto IKE Gateway General IKE Gateway defines the gateway information for local are remote peer the interface and identification parameters. By Riaz Gul
- 10. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto IKE Gateway Advance If there is a NAT device in between the path enable NAT transversal option. By Riaz Gul
- 11. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto Tunnel Interface Since Palo Alto support route- based VPNs, therefore we need to have on interface to be attached to VPN so that we can configure Policy and route desire traffic on tunnel. By Riaz Gul
- 12. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto IPSec Tunnel Interface Now create IPSec Tunnel and combine the configured crypto profile and IPSec profile and define the proxy IDs (Interesting Traffic) By Riaz Gul
- 13. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto IPSec Tunnel Interface Proxy IDs By Riaz Gul
- 14. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto Remote Subnet Routing Since Palo Alto support route- based VPN, we need to define the route for other site LAN subnet towards the tunnel interfaces which is linked to IPSec tunnel. By Riaz Gul
- 15. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto Remote Subnet Routing Since Palo Alto support route- based VPN, we need to define the route for other site LAN subnet towards the tunnel interfaces which is linked to IPSec tunnel. By Riaz Gul
- 16. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Palo Alto Traffic Access Rules By Riaz Gul
- 17. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Cisco Router Phase 1 & 2 Parameters By Riaz Gul
- 18. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Define Interesting Traffic Cisco Router By Riaz Gul
- 19. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Crypto Map on WAN Interface Cisco Router By Riaz Gul
- 20. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Verification By Riaz Gul
- 21. PaloAlto LAB IPSec PaloAlto & Cisco IOS Router Verification By Riaz Gul
- 22. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul To establish site to site VPN between Fortigate and Paloalto firewalls, the WAN reachability must be present.
- 23. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto IKE Phase 1
- 24. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto IKE Phase 2
- 25. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto IKE Gateway
- 26. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto IKE Gateway Advance
- 27. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto Tunnel Interface
- 28. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto IPSec Tunnel
- 29. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto Proxy IDs
- 30. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Palo Alto Define Route for Remote Subnet towards Tunnel
- 31. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Fortigate VPN Tunnel Network Settings
- 32. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Fortigate Authentication Settings IKE Version
- 33. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Fortigate Phase 1 Parameters
- 34. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Fortigate Phase 2 Parameters & Interesting Traffic
- 35. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Fortigate Define Route for PA LAN Subnet
- 36. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Fortigate Security Access Policies to Allow Traffic on VPN
- 37. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Verification
- 38. PaloAlto LAB IPSec PaloAlto & Fortigate By Riaz Gul Verification
- 39. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Both peers have WAN reachability, therefore we can configure IPSec VPN
- 40. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto IKE Crypto Profile
- 41. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto IPSec Profile
- 42. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto IKE Gateway
- 43. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto IKE Gateway Advance
- 44. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto Tunnel Interface
- 45. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto IPSec Tunnel
- 46. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto Proxy IDs
- 47. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Palo Alto Remote Route
- 48. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG IPSec Profile
- 49. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG IPSec VPN General Setting
- 50. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Encryption Authentication
- 51. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Gateway & Interesting Traffic
- 52. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Tunnel Interface
- 53. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Access Rules
- 54. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Routing
- 55. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Verification
- 56. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Verification
- 57. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Verification
- 58. PaloAlto LAB IPSec PaloAlto & SophosXG By Riaz Gul Sophos XG Verification