Share your Cyber Security Insights
On-Stage at CPX 2025
Simplifying Zero Trust Security
with Infinity Identity!
CheckMates Toolbox Contest 2024
Make Your Submission for a Chance to WIN up to $300 Gift Card!
CheckMates Go:
What's New in R82
Ok.
So i would check ikev2.xmll file on the gw while 'vpn debug trunc ALL=5' is on. And you use ikev2.
Look under the relevant peer under authentication.
The type should be IPV4_ADDR usually (where at the screenshot it says KEY_ID)
Then at the data see the actual ID sent. And weather it's indeed 0.0.0.0 or not.
If it is 0.0.0.0 you have something to show to TAC to investigate, or just consider change to FQDN as mentioned.
If its other valid value. Then it means you don't send 0.0.0.0 as ID. And i would ask PAN side for the proof of ike packet coming with 0.0
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY
