topic Port Mirror Query in General Topics

Port Mirror Query

YazarArafath — Mon, 20 Dec 2021 09:22:01 GMT

Hi Team,

Palo Alto port mirroring will forward only a copy of encrypted traffic "https" after decrypting it
or also can forward un-encrypted traffic "http" as well

Re: Port Mirror Query

OtakarKlier — Mon, 20 Dec 2021 21:12:29 GMT

Hello,

It will only forward decrypted traffic.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/decryption-concepts/decryption-mirroring

Regards,

Re: Port Mirror Query

TomYoung — Tue, 21 Dec 2021 04:36:45 GMT

Hi @YazarArafath ,

With the PAN-OS 10.1, the "new Network Packet Broker feature replaces Decryption Broker and expands its capabilities to filter and forward not only decrypted TLS traffic, but also non-decrypted TLS and non-TLS traffic." https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/networking-features/network-packet-broker.html

Thanks,

Tom