https://live.paloaltonetworks.com/t5/general-topics/zone-protection-issue/m-p/229382#M65940 <P>hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/76179">@AzerbaijanSupermarkets</a></P> <P>&nbsp;</P> <P>you can have the firewall in front of your IBR as a vwire with zone protection, and behind the IBR in L3 mode as a router, or another vwire</P> Tue, 04 Sep 2018 12:21:59 GMT reaper 2018-09-04T12:21:59Z https://live.paloaltonetworks.com/t5/general-topics/zone-protection-issue/m-p/229245#M65910 <P>Hi to all!</P><P>I have such kind of problem.</P><P>I have applied Zone Protection profile on my outside(untrust) interface.</P><P>The problem is, that PAN is behind IBR(is configured as virtual wire), where are configured all our public ip.</P><P>What can we do in this case?</P><P>Thanks in advance!</P> Mon, 03 Sep 2018 11:57:47 GMT https://live.paloaltonetworks.com/t5/general-topics/zone-protection-issue/m-p/229245#M65910 AzerbaijanSupermarkets 2018-09-03T11:57:47Z https://live.paloaltonetworks.com/t5/general-topics/zone-protection-issue/m-p/229382#M65940 <P>hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/76179">@AzerbaijanSupermarkets</a></P> <P>&nbsp;</P> <P>you can have the firewall in front of your IBR as a vwire with zone protection, and behind the IBR in L3 mode as a router, or another vwire</P> Tue, 04 Sep 2018 12:21:59 GMT https://live.paloaltonetworks.com/t5/general-topics/zone-protection-issue/m-p/229382#M65940 reaper 2018-09-04T12:21:59Z