Virtual Private Networks (VPNs)
There are several ways of connecting devices in a secure way. In this chapter, we will learn about site-to-site VPNs and the challenges you may encounter when connecting to different vendors. Palo Alto Networks firewalls currently support the following protocols:
- Generic Routing Encapsulation (GRE) is a fairly old protocol that is not very secure but can be useful if legacy devices need to be connected to the firewall to provide rudimentary security to the encapsulated packets.
- Internet Protocol Security (IPSec) is the de facto tunneling protocol between remote sites and can be used for very strong encryption.
- Secure Socket Layer (SSL), which is really Transport Layer Security (TLS), is used to connect endpoints over a network-friendly protocol if IPSec is unavailable.
We will also learn how to set up a GlobalProtect user VPN and verify whether hosts connecting remotely are in a permissible state to enter the network...
