topic Re: How to allow GRE protocol 47 through Palo Alto FW? in General Topics

How to allow GRE protocol 47 through Palo Alto FW?

Jedi_D — Fri, 12 Jan 2018 19:55:44 GMT

Dear Friends,

I'd be grateful if you could help me with this ...

I'd like to allow GRE traffic (protocol 47) through my Palo Alto FW. I want to allow all the GRE traffic through and not terminate a GRE tunnel on the PA itself. Appologies if this is simple, please can someone point out how I can do this? Do I need to create a FW policy to allow GRE protocol 47? Any suggestions or any documents references would be much appreicated.

Re: How to allow GRE protocol 47 through Palo Alto FW?

BPry — Fri, 12 Jan 2018 21:50:12 GMT

@Jedi_D,

You should simply have to allow the application 'gre' to traverse the firewall across the required zones.

Re: How to allow GRE protocol 47 through Palo Alto FW?

Jedi_D — Sat, 13 Jan 2018 22:17:26 GMT

Thank you for your help and response Bpry,

Is this application already available or should I define one? Also please could you suggest what the service should be? Could it be "service-default"?

Thanks and regards,

Re: How to allow GRE protocol 47 through Palo Alto FW?

BPry — Sat, 13 Jan 2018 22:24:09 GMT

@Jedi_D,

The GRE application should already be defined if you are running at least a somewhat currently version of Applications and Threats. You should be fine with leaving the service as application-default.