In the earlier PAN-OS versions, the IPSec transport mode did not support proxy ID settings for IPSec negotiation. Hence, you could not configure a proxy ID in transport mode when using the web interface. If you try to configure a proxy ID through the CLI, it will be replaced with 0.0.0.0/0 automatically during the configuration commit. With the lack of proxy ID support, connecting to other vendor’s devices through policy-based IPSec transport mode was leading to communication failure.

We’ve now introduced support for proxy ID in transport mode that enables you to have a seamless connection. You can configure proxy ID in IPSec transport mode only using the CLI command.