R77.30 - Traditional mode to simplified mode conversion issue

[anshulpandey21]

We were performing the traditional to simplified policy conversion which had no 100% successful result. We have VPN of 2 flavour 

1. Own VPN sites - Mesh topology

2. Third Party Sites - Star Topology

Traditional to simplified conversion was fine and all the tunnels came up post bypassing the IKE parameters in exclusion list under community settings. 

Issue -

1. After 20 min all the VPNs started going down - Own VPN and Partner VPN

2. Internet traffic via proxy was getting encrypted. which is not expected

3. Remote site firewalls where we have S-S tunnel was not accessible over HTTP. they use custom port 4331

Below are the details of the firewall.

Software Version – R77.30

VPN type – Site to Site VPN

MOdel - 4800

Current Method – Traditional mode VPN.

Thanks

Anshul Pandey

[PhoneBoy]

You should probably get the TAC involved with this.

[anshulpandey21]

Thanks for the input. We have opened one and I will update the solution once concluded.