topic Re: Missmatched GW name in VTI and GW object in Firewall and Security Management

Missmatched GW name in VTI and GW object

adamec — Sat, 06 Apr 2024 05:56:10 GMT

Hi we have a problem with IPSEC VPN s2s. Let's say there are 2 GWs named LocalGW (our site) and RemoteGW (remote site).

We on out local site created object of remote GW called "Remote_GW" and created a VTI with GW peer name "RemoteGW" (difference in underscore _ ) thus the packets are being dropped with error message "According to the policy the packet should not have been decrypted". My question is, does it suffice if we just rename the VTI to the name "Remote_GW" or does object name and VTI peer GW name also need to match a real remote GW name (RemoteGW) ???

Thanks

Re: Missmatched GW name in VTI and GW object

AmirArama — Sat, 06 Apr 2024 09:09:39 GMT

The peer name in VTI needs to match the smartconsole gw object name

Re: Missmatched GW name in VTI and GW object

the_rock — Sat, 06 Apr 2024 13:28:33 GMT

As @AmirArama said, it HAS TO match, exactly, so if character is missing, it will never work, period.

Andy