<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cisco on Code Red</title><link>https://fy.ax/tags/cisco/</link><description>Recent content in Cisco on Code Red</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sun, 22 Mar 2026 01:30:00 +0300</lastBuildDate><atom:link href="https://fy.ax/tags/cisco/index.xml" rel="self" type="application/rss+xml"/><item><title>GRE-over-IPSec Between PAN-OS and Cisco IOS-XE — What Works and What Doesn't</title><link>https://fy.ax/posts/panos-gre-over-ipsec-with-cisco-iosxe/</link><pubDate>Sun, 22 Mar 2026 01:30:00 +0300</pubDate><guid>https://fy.ax/posts/panos-gre-over-ipsec-with-cisco-iosxe/</guid><description>&lt;p&gt;If you&amp;rsquo;ve ever needed to set up a GRE-over-IPSec tunnel between a Palo Alto firewall and a Cisco router, you&amp;rsquo;ve probably noticed the documentation is thin on the ground — especially when it comes to interoperability between the two platforms. I recently went through this exercise between a &lt;strong&gt;PA-VM (PAN-OS 11.2.5)&lt;/strong&gt; and a &lt;strong&gt;Cisco CSRv-8000 (IOS-XE 17.16.1a)&lt;/strong&gt; and learned some things the hard way.&lt;/p&gt;
&lt;h2 id="the-goal"&gt;
 The Goal
 &lt;a class="heading-link" href="#the-goal"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;Replicate a production pattern where a customer device connects to a target router using &lt;strong&gt;GRE tunnels encapsulated inside IPSec&lt;/strong&gt; — the same architecture used in financial trading networks where encrypted, routed tunnels carry sensitive traffic between sites.&lt;/p&gt;</description></item></channel></rss>