After Migrating from an ASA firewall to a Palo Alto Networks Firewall, the VPN connection between a remote network and the Palo Alto Networks Firewall is not establishing correctly. The following entry is appearing in the logs:

Pfs group mismatched: my:0 peer:2 Which setting should be changed on the Palo Alto Networks Firewall to resolve this error message?

Question

After Migrating from an ASA firewall to a Palo Alto Networks Firewall, the VPN connection between a remote network and the Palo Alto Networks Firewall is not establishing correctly. The following entry is appearing in the logs:

Pfs group mismatched: my:0 peer:2 Which setting should be changed on the Palo Alto Networks Firewall to resolve this error message?

Accepted Answer

D. Update the IPSec Crypto profile for the Vendor IPSec Tunnel from no-pfs to group2.

Answer

A. Update- the IPSec Crypto profile for the Vendor IPSec Tunnel from group2 to no-pfs.

Answer

B. Update the IKE Crypto profile for the Vendor IKE gateway from no pfs to group2.

Answer

C. Update the IKE Crypto profile for the Vendor IKE gateway from group2 to no pfs

After Migrating from an ASA firewall to a Palo Alto Networks Firewall, the VPN connection between a remote network and the Palo Alto Networks Firewall is not establishing correctly. The following…

Question

Options

How the community answered

Community Discussion