topic Re: Why would new span port all of a sudden stop traffic between zones from flowing (no logs at all in General Topics

Why would new span port all of a sudden stop traffic between zones from flowing (no logs at all)

clyde.franklin — Tue, 19 Sep 2017 19:55:00 GMT

Why would new span port all of a sudden stop traffic between zones from flowing (no logs at all) works after span is rule is disabled.

Re: Why would new span port all of a sudden stop traffic between zones from flowing (no logs at all

BPry — Wed, 20 Sep 2017 14:26:47 GMT

@clyde.franklin,

Are you attempting this to do this all on one vsys? I've never used SPAN ports in conjunction with actually routing traffic through the firewall unless I've seperated these via vsys so I'm not sure if you could be hitting a software bug or if this is expected behavior.

Obviously with SPAN/Tap deployments you wouldn't have security policies or zones since the firewall just sits on the wire essentially. It could be that creating that SPAN port the rest of your configuration shuts down as it isn't expected to be there, but I would have to assume that this would be a bug within whatever code version you are running.

Re: Why would new span port all of a sudden stop traffic between zones from flowing (no logs at all

clyde.franklin — Wed, 20 Sep 2017 14:33:56 GMT

Then why is it on Palo Alto white papers it states to build rule and zones for span port