topic Palo Alto Hyper-V Security Policies with Hyper-V hosts in General Topics

Palo Alto Hyper-V Security Policies with Hyper-V hosts

Radcliffe_Barham — Mon, 31 Jul 2023 16:22:18 GMT

Hi,

I have a PA-VM-HPV-10.1.0 setup with 2 hyper-v host. I've setup zones, virtual routers and the respective interfaces in L3. Testing the rules I can pings clients in zone 'A' from clients in zone 'B'. The problem is my 'Hits' count remains at zero and no traffic logs is seen in the monitoring menu. Is there some specific config settings I am missing? I'm only seeing increases in the intrazone traffic count but not the specific security policy I created. I've enabled mac address spoofing for the virtual network adapter interfaces.

I can ping each client from the firewall interfaces.

Re: Palo Alto Hyper-V Security Policies with Hyper-V hosts

JayGolf — Mon, 31 Jul 2023 17:20:46 GMT

Hi @Radcliffe_Barham ,

Can you describe the security policy rule you created? Zone A to Zone B with which app/protocol? Are you logging the session at end? Also, Please enter "show log traffic direction equal forward" into the CLI. Do you see any logs?

Re: Palo Alto Hyper-V Security Policies with Hyper-V hosts

Radcliffe_Barham — Mon, 31 Jul 2023 18:28:00 GMT

Hi Jay,

It was a basic rule; from source zone 'A' to destination zone 'B', any application, any service/category, allowed and logging at session end. I get consistent ping replies when pinging the device in 'B' from 'A' but the hit count stays at zero with no traffic logs seen.

I will try the cli command later when back on the test site.

Re: Palo Alto Hyper-V Security Policies with Hyper-V hosts

Radcliffe_Barham — Tue, 01 Aug 2023 00:08:35 GMT

Checked the command. The logs are empty.