topic Re: If Vwire is transparent, then why do you have to specify which VLANs are allowed through? in General Topics https://live.paloaltonetworks.com/t5/general-topics/if-vwire-is-transparent-then-why-do-you-have-to-specify-which/m-p/13721#M10059 <HTML><HEAD></HEAD><BODY><P>It's still stateful, you'll need to either allow all VLANs to make it transparent (agnostic) or individual ones.</P><P></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">All the firewall is always stateful if you put it inline it will still drop out of window or out of sync packets (asymmetric routing).</SPAN></P></BODY></HTML> Thu, 07 Mar 2013 23:52:04 GMT amansour 2013-03-07T23:52:04Z If Vwire is transparent, then why do you have to specify which VLANs are allowed through? https://live.paloaltonetworks.com/t5/general-topics/if-vwire-is-transparent-then-why-do-you-have-to-specify-which/m-p/13720#M10058 <HTML><HEAD></HEAD><BODY><P>I usually just open up the range of vlans from 1-4094...but why do this is it's meant to be transparent?</P></BODY></HTML> Thu, 07 Mar 2013 23:48:32 GMT https://live.paloaltonetworks.com/t5/general-topics/if-vwire-is-transparent-then-why-do-you-have-to-specify-which/m-p/13720#M10058 Abs 2013-03-07T23:48:32Z Re: If Vwire is transparent, then why do you have to specify which VLANs are allowed through? https://live.paloaltonetworks.com/t5/general-topics/if-vwire-is-transparent-then-why-do-you-have-to-specify-which/m-p/13721#M10059 <HTML><HEAD></HEAD><BODY><P>It's still stateful, you'll need to either allow all VLANs to make it transparent (agnostic) or individual ones.</P><P></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">All the firewall is always stateful if you put it inline it will still drop out of window or out of sync packets (asymmetric routing).</SPAN></P></BODY></HTML> Thu, 07 Mar 2013 23:52:04 GMT https://live.paloaltonetworks.com/t5/general-topics/if-vwire-is-transparent-then-why-do-you-have-to-specify-which/m-p/13721#M10059 amansour 2013-03-07T23:52:04Z Re: If Vwire is transparent, then why do you have to specify which VLANs are allowed through? https://live.paloaltonetworks.com/t5/general-topics/if-vwire-is-transparent-then-why-do-you-have-to-specify-which/m-p/13722#M10060 <HTML><HEAD></HEAD><BODY><P>I recommendation that you define vlans 0-4094 to include vlan 0, the native vlan. Thanks.</P></BODY></HTML> Thu, 07 Mar 2013 23:58:39 GMT https://live.paloaltonetworks.com/t5/general-topics/if-vwire-is-transparent-then-why-do-you-have-to-specify-which/m-p/13722#M10060 rmonvon 2013-03-07T23:58:39Z