R77.30 - Traditional mode to simplified mode conversion issue

anshulpandey21 — Mon, 02 Sep 2019 16:01:31 GMT

We were performing the traditional to simplified policy conversion which had no 100% successful result. We have VPN of 2 flavour

1. Own VPN sites - Mesh topology

2. Third Party Sites - Star Topology

Traditional to simplified conversion was fine and all the tunnels came up post bypassing the IKE parameters in exclusion list under community settings.

Issue -

1. After 20 min all the VPNs started going down - Own VPN and Partner VPN

2. Internet traffic via proxy was getting encrypted. which is not expected

3. Remote site firewalls where we have S-S tunnel was not accessible over HTTP. they use custom port 4331

Below are the details of the firewall.

Software Version – R77.30

VPN type – Site to Site VPN

MOdel - 4800

Current Method – Traditional mode VPN.

Thanks

Anshul Pandey

Re: R77.30 - Traditional mode to simplified mode conversion issue

PhoneBoy — Tue, 03 Sep 2019 00:05:00 GMT

You should probably get the TAC involved with this.

Re: R77.30 - Traditional mode to simplified mode conversion issue

anshulpandey21 — Tue, 03 Sep 2019 08:44:14 GMT

Thanks for the input. We have opened one and I will update the solution once concluded.

topic Re: R77.30 - Traditional mode to simplified mode conversion issue in Firewall and Security Management

R77.30 - Traditional mode to simplified mode conversion issue

Re: R77.30 - Traditional mode to simplified mode conversion issue

Re: R77.30 - Traditional mode to simplified mode conversion issue