topic flow chart in General Topics

flow chart

YGoldy — Thu, 12 Sep 2024 17:15:42 GMT

Hi guys.
I'm new in Palo Alto, but have quite a few years with other Firewalls.
Some time, for getting good decisions, you have to know the flow chart of the Firewall.
Maybe it's existing, but I can't find it.
What I mean by flow chart, is how the information pass thru the firewall.
for example - Routing, Nat, Policy base rout, Security, QOS, Security profile, SD-Wan and so on.
what is coming first and what is later.

Is there any graphical chart that show this?

Thanks, and any help will be appreciated?

Thanks, and any help will be appreciated.
🙂
Regards,
Goldy

Re: flow chart

TomYoung — Thu, 12 Sep 2024 18:02:25 GMT

Hello @YGoldy ,

Your flow chart is included in this link. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVHCA0

Here are my notes on the flow chart (which may not be entirely correct):

Ingress
1. Packet Checking/Parsing
2. Decapsulation/Decryption
Session Lookup
1. Match 6-tuple key: source-address, destination-address, source-port, destination-port, protocol, and security-zone.
2. Match = Fastpath. No = Session Setup/Slowpath.
Session Setup/Slowpath
1. The session is created.
2. Lookups are done, but NAT is not applied to the packet. PBF takes precedence over routing.
3. Zone and DoS Protection are checked.
Fastpath
1. Application Override
2. Decryption
3. App-ID
4. Content-ID
Egress
1. QoS
2. NAT
3. SD-WAN
4. Encryption/Encapsulation

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVECA0

Thanks,

Tom

Re: flow chart

YGoldy — Fri, 13 Sep 2024 08:26:17 GMT

Thanks.

It's a shame the chart picture in the link is in not too sharp and in high resolution so we can englare it.