topic BGP - TCP/179 in General Topics

BGP - TCP/179

Jedi_D — Sat, 27 Apr 2019 21:58:42 GMT

Hello Folks,

I have a simple BGP question.

I'm going to be creating a BGP peer between a Palo Alto firewall and a Cisco router. Do I need to create a security policy allowing TCP/179 between my Palo Alto firewall and the router. They are directly connected. I cant find any examples of that.... so hopeing some can advise.

thank you.

Re: BGP - TCP/179

BPry — Sun, 28 Apr 2019 03:31:30 GMT

@Jedi_D,

This would depend on how you've configured your firewall. I would look at the logs, ensuring that you've temporarily allowed logging on the default intrazone and interzone default policies, and see what the logs are saying. In some cases you won't need one because the traffic is intrazone (untrust to untrust) traffic; in other cases you will need a policy as it's interzone traffic.