IKEv2 Gateway configuration Requires Explicit CLI
Setting (For firewalls running versions between
11.2.0 and 11.2.4 managed by Panorama running 11.2 or later
versions) |
A configuration interpretation error occurs on the Panorama managed
firewalls when establishing IKEv2 gateways through Panorama's
default configuration settings. When you configure a new IKEv2
gateway on Panorama using the default settings, specifically the
default IKE version (IKEv2) and default IKE and IPSec Crypto
profiles without making any specific modifications to the crypto
profile parameters and subsequently push this configuration to a
managed firewall, the receiving firewall incorrectly interprets the
new IKEv2 gateway as an IKEv1 gateway instead.
To prevent this misinterpretation, you need to manually specify the
IKE version as "IKEv2" through Panorama's CLI before committing and
deploying the configuration on the firewalls.
This issue specifically impacts firewalls running versions between
11.2.0 and 11.2.4 when they receive configurations from Panorama
running version 11.2 or later versions.
| 
