topic Re: Ignoring stateful Inspection - Asymetrical Routing in General Topics

Ignoring stateful Inspection - Asymetrical Routing

nawaza — Wed, 25 Oct 2017 09:26:51 GMT

Hi all

In asymetrical routing scenario where return packets arrive on different interface, is there a feature in Palo to accept the flow?.

Many thanks

Ajaz Nawaz

CCIE RS #15721

JNCIE-SEC #254

Anon1 — Wed, 25 Oct 2017 09:31:05 GMT

Yes, you can enable to allow asymmetric flow globally or per zone.

nawaza — Fri, 27 Oct 2017 11:33:49 GMT

While this feature seams to be available, and supposedly works... it lacks granularity.

Source NAT in my experience is a far more elegant means of dealing with such scenarios.

Thanks nonetheless !

Ajaz Nawaz

CCIE-RS#15721

JNCIE-SEC#254