Why is IKE Application Traffic Identified as 'cisco vpn'?

Why is IKE Application Traffic Identified as 'cisco vpn'?

0
Created On 09/26/18 13:55 PM - Last Modified 07/19/22 23:11 PM


Resolution


If the IKE traffic is terminated on a Cisco device, it can contain a Cisco vendor ID field.  If the Cisco vendor ID field is seen in IKE packets by the App-ID it will be identified as 'ciscovpn' application.

 

owner: nmiletic



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm0iCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail