Opened 6 months ago

Closed 6 months ago

Last modified 2 months ago

#1115 closed defect (pending)

Palo Alto SSL VPN does not work on nat64 ssid

Reported by: Bill Fenner Owned by: llynch@…
Priority: tbd Milestone: ietf-099
Component: nat64 Keywords:
Cc: My Current Location:
My MAC Address: My OS:

Description

My Palo Alto SSL VPN client fails to connect when using the nat64 ssid. This is not a surprise given all the "NO"s at ​https://live.paloaltonetworks.com/t5/tkb/articleprintpage/tkb-id/learning_tkb/article-id/46 on the line about SSL VPN.

This was also true at IETF-97: https://tickets.meeting.ietf.org/ticket/1041

I don't expect the IETF NOC to do anything about this, but there was a desire expressed to collect information about what works and what doesn't work on nat64.

Change history (4)

comment:1 Changed 6 months ago by llynch@…

Resolution: pending
Status: newclosed

Thanks for trying the NAT64 network (SSID ietf-nat64) and reporting your experience. As far as we can tell, the issue you reported is either an issue of the NAT64 implementation’s handling of that specific traffic or the given application vendor's implementation. We’re collecting all the issues that come up and will pass the reports back to the vendor at the end of the week. Hopefully this will lead to better implementations and greater functionality for the next meeting. If you’re curious about other known issues, please see https://tickets.meeting.ietf.org/wiki/nat64

If you have additional input on this issue please update the ticket, if you see new issues please open additional tickets.

Thanks -

comment:2 Changed 6 months ago by llynch@…

Component: incomingnetwork
Type: requestdefect

comment:3 Changed 6 months ago by llynch@…

Component: networknat64

comment:4 Changed 2 months ago by Rick Alfvin

Milestone: ietf-99ietf-099

Milestone renamed

Note: See TracTickets for help on using tickets.