topic TAP Mode in General Topics

TAP Mode

umar00o — Tue, 11 Feb 2020 13:40:25 GMT

Hi,

I want to know if there is a way to forward all switch traffic to single Destination port of Palo alto. So far I can find on switch side you can make a singel port source and destination the PA port. Just want to know if we can monitor all ports on the switch?

Thanks

Re: TAP Mode

reaper — Tue, 11 Feb 2020 15:16:02 GMT

you could theoretically forward _all_ ports to a single port on the switch, but unless your network doesn't have a lot of traffic that will bring down your switch

you may want to ask this on the forum of your preferred switch manufacturer 😄

if you really need to monitor everything you could supersegment your switch so each port has a single vlan, then connect the firewall via a trunk and create a subinterface for each vlan, that way all traffic needs to go through the firewall.

you could set it to layer2 mode if you don't want to route and subnet

Re: TAP Mode

umar00o — Tue, 11 Feb 2020 15:29:11 GMT

I see, Thank you very much I'll try this in a lab and see how it goes.

Thanks

Re: TAP Mode

RobinClayton — Wed, 12 Feb 2020 10:53:40 GMT

"Monitor", "Mirror" or "SPAN" are the general terms your probably looking for..

All our switch traffic is mirrored out to the PA Tap interface for inspection.