topic Capture logs virtual wire or tap in Expedition Discussions https://live.paloaltonetworks.com/t5/expedition-discussions/capture-logs-virtual-wire-or-tap/m-p/296655#M2120 <P>If a legacy firewall has more then two connection, i.e. 3, internet, inside and DMZ, do we virtual wire all 3 interfaces?&nbsp; Or do we just do between internet and users?&nbsp; I wouldnt see everything then , trying to understand best approach to get all traffic..for APP-IDing..</P> Wed, 06 Nov 2019 11:43:28 GMT achrist_2019 2019-11-06T11:43:28Z Capture logs virtual wire or tap https://live.paloaltonetworks.com/t5/expedition-discussions/capture-logs-virtual-wire-or-tap/m-p/296655#M2120 <P>If a legacy firewall has more then two connection, i.e. 3, internet, inside and DMZ, do we virtual wire all 3 interfaces?&nbsp; Or do we just do between internet and users?&nbsp; I wouldnt see everything then , trying to understand best approach to get all traffic..for APP-IDing..</P> Wed, 06 Nov 2019 11:43:28 GMT https://live.paloaltonetworks.com/t5/expedition-discussions/capture-logs-virtual-wire-or-tap/m-p/296655#M2120 achrist_2019 2019-11-06T11:43:28Z