topic more than one mirror decryption interface in General Topics https://live.paloaltonetworks.com/t5/general-topics/more-than-one-mirror-decryption-interface/m-p/22222#M16189 <HTML><HEAD></HEAD><BODY><P>is it possible to forward decrypted traffic using more than one interface&nbsp; ?</P><P>what will happen when we choose 2 eth for decrypt mirror with 2 decryption profile ?</P></BODY></HTML> Wed, 08 Apr 2015 12:59:39 GMT Retired Member 2015-04-08T12:59:39Z more than one mirror decryption interface https://live.paloaltonetworks.com/t5/general-topics/more-than-one-mirror-decryption-interface/m-p/22222#M16189 <HTML><HEAD></HEAD><BODY><P>is it possible to forward decrypted traffic using more than one interface&nbsp; ?</P><P>what will happen when we choose 2 eth for decrypt mirror with 2 decryption profile ?</P></BODY></HTML> Wed, 08 Apr 2015 12:59:39 GMT https://live.paloaltonetworks.com/t5/general-topics/more-than-one-mirror-decryption-interface/m-p/22222#M16189 Retired Member 2015-04-08T12:59:39Z Re: more than one mirror decryption interface https://live.paloaltonetworks.com/t5/general-topics/more-than-one-mirror-decryption-interface/m-p/22223#M16190 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>I configured several interfaces (4, on-board copper ports and SFPs), including an aggregate, on a PA-3020 running 6.1.3 and allocated to different decryption profiles called in distinct decryption policies. Not tested with production traffic.</P><P></P><P><IMG __jive_id="19345" alt="mirror_interfaces.png" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/19345_mirror_interfaces.png" style="height: 314px; width: 620px;" /></P><P>The decryption profile does not include a column referencing attached mirror interfaces:</P><P><IMG __jive_id="19349" alt="decryption_profile.png" class="image-1 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/19349_decryption_profile.png" style="height: auto;" /></P><P>The decryption policies are supposed to copy traffic to appropriate mirror port:</P><P><IMG __jive_id="19350" alt="decryption_policy.png" class="jive-image image-2" src="https://live.paloaltonetworks.com/legacyfs/online/19350_decryption_policy.png" style="height: 59px; width: 620px;" /></P></BODY></HTML> Thu, 30 Apr 2015 07:33:36 GMT https://live.paloaltonetworks.com/t5/general-topics/more-than-one-mirror-decryption-interface/m-p/22223#M16190 andreip 2015-04-30T07:33:36Z