Span or port mirror?

Stuart_Sharp — Mon, 16 May 2016 11:05:35 GMT

Is it possible to use interfaces on PA-5020 as span or mirrored ports of other active interfaces on the same device?

Re: Span or port mirror?

rmonvon — Mon, 16 May 2016 13:41:13 GMT

Hi...The port mirroring capability of the PA is for decrypted traffic only, and does not include non-decrypted traffic. For example, SSL traffic can be decrypted by the PA and the contents inside the SSL tunnel can be forwarded out an Eth port set up as port mirroring. Here's more info on port mirroring:

https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/decryption/configure-decryption-port-mirroring

If you want to span all traffic, it's best to do it at your switch.

Thanks.

topic Span or port mirror? in General Topics

Span or port mirror?

Re: Span or port mirror?