Mulit-Vsys setup with Wildfire

sandeepsutar — Mon, 30 Dec 2024 06:57:51 GMT

Hi Friends,

We are planning for a multi-vsys PA setup, where one vsys will have only L3/L4 policies and second vsys will be in L2 bridge mode with Threat prevention features only.

Vsys1 will only scan L3/L3 policies while vsys2 will scan traffic for any threats.

We believe this is logically possible solution, need some clarity on integrating Wildfire appliance in this architecture. Wildfire will be connected via 1 Mgmt and 1 VM interface, and it will be interfaced in vsys2 (bridge mode).

Just needed your inputs, if this setup is workable, if yes, can bridge mode vsys forward traffic to wildfire through its Mgmt interfaces for unknown files sampling?

Appreciating your valuable inputs.

Regards,

Sandeep

Re: Mulit-Vsys setup with Wildfire

sandeepsutar — Sat, 11 Jan 2025 14:45:55 GMT

Thank You Victoria for your inputs!

What I understand is for this setup, although there will be two vSys, mangement interface will be common for both vSys.

So when L2 bridge vSys will submit the sample, it will be forwarded through common management interface toward to Wildfire Management interface, please let me know if my understanding is correct.

Can Mgmt interface be common across the vSys?

Appreciating your response!

Regards,

Sandeep

topic Re: Mulit-Vsys setup with Wildfire in General Topics

Mulit-Vsys setup with Wildfire

Re: Mulit-Vsys setup with Wildfire