topic Re: Mirror traffic from tunnel interfaces to SPAN port in General Topics https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16369#M11948 <HTML><HEAD></HEAD><BODY><P>Hello Edevansky,</P><P></P><P>Could you please explain, how you did this on CISCO device. Accordingly, we can think about an approach here in PAN firewall to achieve the goal.</P><P></P><P>Thanks</P></BODY></HTML> Thu, 22 May 2014 16:44:46 GMT HULK 2014-05-22T16:44:46Z Mirror traffic from tunnel interfaces to SPAN port https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16368#M11947 <HTML><HEAD></HEAD><BODY><P>Hello Everyone, </P><P>I'm new to the PA firewall's and trying to figure out how to monitor my tunnel interfaces, and the traffic flowing through them. </P><P></P><P>I have a PA-3020 running as an endpoint for several tunnels. I want to mirror the traffic from those tunnels when it hits the PA before it is routed and offload it to a specific interface port. I've done just this on a Cisco device, but it seems a bit more complex on the PA. </P><P></P><P>How can I go about setting this up. </P><P></P><P>Thanks, Eric</P></BODY></HTML> Thu, 22 May 2014 15:33:34 GMT https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16368#M11947 edevansky 2014-05-22T15:33:34Z Re: Mirror traffic from tunnel interfaces to SPAN port https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16369#M11948 <HTML><HEAD></HEAD><BODY><P>Hello Edevansky,</P><P></P><P>Could you please explain, how you did this on CISCO device. Accordingly, we can think about an approach here in PAN firewall to achieve the goal.</P><P></P><P>Thanks</P></BODY></HTML> Thu, 22 May 2014 16:44:46 GMT https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16369#M11948 HULK 2014-05-22T16:44:46Z Re: Mirror traffic from tunnel interfaces to SPAN port https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16370#M11949 <HTML><HEAD></HEAD><BODY><P>Hi Eric,</P><P></P><P>Are you talking about doing a port mirroring (SPAN) on the PAN firewall for IPSec tunnel interface?</P><P></P><P>As far as I know this function is not available at this moment, so you may need to file a feature request through your local SE.<SPAN style="font-size: 10pt; line-height: 1.5em;"> </SPAN></P></BODY></HTML> Fri, 23 May 2014 00:59:06 GMT https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16370#M11949 mizhou 2014-05-23T00:59:06Z Re: Mirror traffic from tunnel interfaces to SPAN port https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16371#M11950 <HTML><HEAD></HEAD><BODY><P>As <A href="https://live.paloaltonetworks.com/u1/24262">mzh</A> mentioned, this feature is not supported on the PAN at this time.</P><P>A feature request (ID 1307) has been filed for this functionality and you could request that your local SE vote on it as well.</P><P></P><P>Regards,</P><P>tasonibare</P></BODY></HTML> Fri, 23 May 2014 05:16:05 GMT https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16371#M11950 tasonibare 2014-05-23T05:16:05Z Re: Mirror traffic from tunnel interfaces to SPAN port https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16372#M11951 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>So from reading this you can't mirror a port on a PAN to another port? </P></BODY></HTML> Thu, 11 Sep 2014 18:02:40 GMT https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16372#M11951 jloehndorf 2014-09-11T18:02:40Z Re: Mirror traffic from tunnel interfaces to SPAN port https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16373#M11952 <HTML><HEAD></HEAD><BODY><P>Hi Hndorf,</P><P></P><P>PANW do not support SPAN, at max you can do packet capture on the interface. </P><P></P><P>There is a open Feature Request for the same. Contact SE to vote for you.</P><P><STRONG style="color: #333333; font-family: verdana, arial, tahoma, sans-serif;">Priority:</STRONG><SPAN style="color: #333333; font-family: verdana, arial, tahoma, sans-serif;"> Medium </SPAN></P><P><STRONG style="color: #333333; font-family: verdana, arial, tahoma, sans-serif;">FR ID:</STRONG><SPAN style="color: #333333; font-family: verdana, arial, tahoma, sans-serif;"> 1307</SPAN></P><P></P><P>Regards,</P><P>Hardik Shah</P></BODY></HTML> Thu, 11 Sep 2014 18:05:33 GMT https://live.paloaltonetworks.com/t5/general-topics/mirror-traffic-from-tunnel-interfaces-to-span-port/m-p/16373#M11952 hshah 2014-09-11T18:05:33Z