topic Re: TAP in environments with asynchronous routing in General Topics

TAP in environments with asynchronous routing

santonic — Thu, 16 Jan 2020 14:48:52 GMT

We have a situation where we can't get all the mirrored traffic to the same interface. But as it's asynchronour souting nevironment a packet can be mirrored to one interface and the reply to the other. So we need to connect 2 PA TAP interfaces to capture whole sessions. The question is will PA match the packets into same session if we put both interfaces into the same security zone?

Re: TAP in environments with asynchronous routing

OtakarKlier — Thu, 16 Jan 2020 15:28:19 GMT

Hello,

While I do not know the PAN answer, wouldn't the pcap device on the back end be able to do this? Asking since I dont know and its an interesting scenario.

Regards,

Re: TAP in environments with asynchronous routing

santonic — Fri, 17 Jan 2020 07:20:48 GMT

The scenario is to introduce PA capabilities to the customer (SLR) so we want to put it in TAP mode on north/south traffic.