topic Re: NAT-T and VPN issues with a CISCO Firepower in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-T-and-VPN-issues-with-a-CISCO-Firepower/m-p/143175#M22208 <P>Had alot of issues with NAT-T and most have been resolved by changing to ike version2.</P> Mon, 07 Mar 2022 21:15:07 GMT Magnus-Holmberg 2022-03-07T21:15:07Z NAT-T and VPN issues with a CISCO Firepower https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-T-and-VPN-issues-with-a-CISCO-Firepower/m-p/143174#M22207 <P>How's it going?</P><P><BR />I have a question that I would like to clarify.<BR />I have a 6600 appliance which cannot establish a VPN with a CISCO Firepower, I have global NAT-T enabled in the appliance properties. On the CISCO side they use UDP encapsulation, but on the Check Point side the tunnel is established through IPSec and not NAT-T. So the behavior seems strange to me.<BR />I changed offer_nat_t_initator parameter to true in order so if the peer wants to switch to using NAT-T port 4500 during the negotiation, we will offer it.</P><P>But this didn't work.</P><P>Can NAT-T be forced over a specific tunnel?</P> Mon, 07 Mar 2022 20:59:55 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-T-and-VPN-issues-with-a-CISCO-Firepower/m-p/143174#M22207 ArathCG 2022-03-07T20:59:55Z Re: NAT-T and VPN issues with a CISCO Firepower https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-T-and-VPN-issues-with-a-CISCO-Firepower/m-p/143175#M22208 <P>Had alot of issues with NAT-T and most have been resolved by changing to ike version2.</P> Mon, 07 Mar 2022 21:15:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-T-and-VPN-issues-with-a-CISCO-Firepower/m-p/143175#M22208 Magnus-Holmberg 2022-03-07T21:15:07Z Re: NAT-T and VPN issues with a CISCO Firepower https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-T-and-VPN-issues-with-a-CISCO-Firepower/m-p/143176#M22209 <P>Hi Magnus.<BR />Thanks for the comment. I forgot to mention that I am working on IKEv2.</P> Mon, 07 Mar 2022 22:06:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/NAT-T-and-VPN-issues-with-a-CISCO-Firepower/m-p/143176#M22209 ArathCG 2022-03-07T22:06:48Z