Even with Proxy IDs, there still needs to be routes for the remote
networks you're trying to reach over the vpn, pointing to the tunnel
interface of the vpn. The reason is that though the palo supports
proxy-ids like a policy-based tunnel, it's basic...
