None of the traffic is getting routed through the IPSec VPN Tunnel.

PAN and Check Point Edge VPN Config.After bringing up site-to-site VPN tunnel using PSK authentication.

On the UTM-1 Edge, navigate to the Reports > Tunnels tab and verify that the tunnel is established:.

Verify that the lights are green for both Phase 1 and Phase 2 status.On the Palo Alto Networks device, navigate to the Network Tab > IPSec Tunnels:.Send a ping from each side to the other (if allowed by policies):.Make sure to check Keep this site alive.Set Security Methods Phase 1 and Phase 2 to Automatic:.Enter the pre-shared key configured on the Palo Alto Networks device:.Choose Authentication method of Shared Secret:.Enter the IP Subnet(s) behind the Palo Alto Networks device:.Enter the IP of the Palo Alto Networks device (must be the same IP configured on the Palo Alto Networks as the Local IP above):.Add new rules to allow IKE/IPSec traffic between the gateways, and desired traffic inside the tunnel: Navigate to the Policies tab > Security.Be sure that the interface is the tunnel interface from above, and Next Hop is None.Open the appropriate VR, and add a static route to the networks behind the Edge device: Navigate to Network > Virtual Routers.Click Show advanced options and enter local and remote proxy IDs:.All other fields are populated automatically. Enter a name, choose the tunnel interface (above), and choose the IKE Gateway (above).Navigate to Network > IPSec Tunnels (click New):.Navigate to Network > Interfaces, and at the bottom of the page choose to create a new Tunnel Interface:.Enter Remote IKE Gateway name, Local interface and IP, remote Gateway IP, and Pre-Shared Key.Navigate to Network > IKE Gateways (click New):.Note: This document is not relevant to Check Point VPN-1 running on Secure Platform, Nokia IPSO appliances, Solaris or Windows. The firmware versions used in this document are: All the named Check Point devices run SofaWare’s Embedded NGX code. The UTM-1 Edge might also be referred to as VPN-1 Edge, SofaWare, or appliances.

This document outlines the basic steps involved in establishing a tunnel between a Palo Alto Networks device and a Check Point UTM-1 Edge.

Vpn site to site checkpoint