topic Re: PAN OS 10, Two devices on different subnets in the same zone in General Topics

PAN OS 10, Two devices on different subnets in the same zone

MantaIT — Tue, 26 Sep 2023 19:39:47 GMT

We are running a Palo 5220. If we setup two different virtual interfaces with two different IP subnets in the same zone. Will I need to setup security policies to allow the two different subnets in a single zone to communicate. or will the Palo route traffic between subnets in the same zone with out any additional security policies?

Re: PAN OS 10, Two devices on different subnets in the same zone

BPry — Tue, 26 Sep 2023 19:44:29 GMT

@MantaIT,

By default, you wouldn't need to do anything to allow this traffic. It'll be caught by the intrazone-default policy and allowed without any action on your end.

Re: PAN OS 10, Two devices on different subnets in the same zone

MantaIT — Tue, 26 Sep 2023 19:56:02 GMT

Thank you very much, that was my thought, but it was not unanimous in our group. We are planning on setting up a test in our lab also, but I thought I could get a quick reply here also. You were a huge help. Thank you.

Re: PAN OS 10, Two devices on different subnets in the same zone

emolina007 — Sun, 09 Jun 2024 06:08:26 GMT

I have a server subnet and a workstation subnet server subnet that we only want to specify communication from server to workstation and vise versa. Would a universal zone work just fine or should we create a server zone and workstation zone and then apply ACL communication? Is there a way to setup a zone with two different subnets in it and not have them talk, only thru ACL allow policy?