topic Re: types of PA firewall inspection in General Topics

types of PA firewall inspection

o_hernandez — Fri, 01 Nov 2019 07:00:10 GMT

Hello community!

I have a question, checking my stick high firewall, I wanted to know if in my firewall I could configure the inspection mode. I have seen another product from another manufacturer that has 2 inspection modes that are the flow mode and the proxy mode. I would like to know if in stick high I also have that functionality available, if so please appreciate being able to share information to be able to review it and be able to perform the configuration.

Thank you very much for your support.

Regards.

Re: types of PA firewall inspection

OtakarKlier — Fri, 01 Nov 2019 22:15:29 GMT

Hello,

Not entirely sure what you are asking. However the PAN can be configured in several ways that can inspect the traffic. Perhaps if you could clarify your question, we could help out further.

Regards,

Re: types of PA firewall inspection

o_hernandez — Sat, 02 Nov 2019 16:41:54 GMT

Thank you for your response, and sorry for not letting me understand.

For example, the Fortigate firewall has 2 inspection modes, the base flow mode and the proxy mode, my question is The Palo Alto firewall, does it also have these types of inspection modes?

Re: types of PA firewall inspection

MP18 — Sun, 03 Nov 2019 03:26:34 GMT

In Palo Alto we have different ways to configure firewall like in layer 3, layer 2, wire etc.?

This depends the on topology of the network.

Is this you are asking for?

Re: types of PA firewall inspection

o_hernandez — Sun, 03 Nov 2019 06:15:52 GMT

@MP18 No, I want to know if Palo Alto firewall has inspection modes similar to the inspection mode of fortigate firewalls (proxy and flow mode).

Re: types of PA firewall inspection

MP18 — Sun, 03 Nov 2019 17:07:23 GMT

I do not think so it has similar to Fortigate Firewall.

Lets see if someone chimes in

Re: types of PA firewall inspection

Remo — Mon, 04 Nov 2019 00:54:20 GMT

Hi @o_hernandez

As @MP18 correctly assumes, this is not like it is possible with fortigate firewalls. PaloAlto only supports flow based inspection.

Re: types of PA firewall inspection

o_hernandez — Mon, 04 Nov 2019 06:43:35 GMT

@Remo Thank you for your comment, you have information that you could share about what you mentioned to be able to have more extensive operation of the PA firewall.

Re: types of PA firewall inspection

Remo — Mon, 04 Nov 2019 12:15:25 GMT

@o_hernandez what do you mean about more extensive operation information? You cannot cpnfigure something else than flow based inspection - or I did not understand your question.

More information about packet processing on a paloalto firewall you can find here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVHCA0

Re: types of PA firewall inspection

o_hernandez — Mon, 09 Dec 2019 05:20:01 GMT

Thanks you @Remo