Azure Network Watcher

RyanJohnstone1144 — Wed, 06 Oct 2021 16:03:04 GMT

Hello,

i want to do a packet capture on a VM interface using Network Watcher for some traffic on our VM-300 series NGFW but our CSP advises this is not possible. The extensions section in Azure seems to confirm this.

can anyone advise if this feature is available? we are having issues with a flow of traffic not being received at the far end but the PA is saying it is sending it, i need to do a capture outside of the PA to see if the traffic is definately being sent.

thanks

Re: Azure Network Watcher

PavelK — Fri, 05 Nov 2021 06:24:28 GMT

Thank you for posting question @RyanJohnstone1144

I was researching this and eventually ended up with opening a ticket to Microsoft to get definitive answer. The answer is: unfortunately it is not possible and at least at this moment there is no other alternative way capture traffic. I am sure you are aware of data plane packet capture in Firewall: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0 If you requirement is to confirm that traffic is egressing an interface, potentially this might be up to the job.

Kind Regards

Pavel

topic Re: Azure Network Watcher in VM-Series in the Public Cloud

Azure Network Watcher

Re: Azure Network Watcher