<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Multicast, who accessed?? in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413642#M92998</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;What zone are the clients that you would like to see the traffic to in? If the clients are in a different zone or subnet, you can either set a deny to a destination subnet or zone.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Regards,&lt;/P&gt;</description>
    <pubDate>Wed, 16 Jun 2021 18:45:15 GMT</pubDate>
    <dc:creator>OtakarKlier</dc:creator>
    <dc:date>2021-06-16T18:45:15Z</dc:date>
    <item>
      <title>Multicast, who accessed??</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413012#M92909</link>
      <description>&lt;P&gt;I have tested multicast to be working and is configured as in this diagram. In the logs I see traffic from SERVER zone to Multicast zone. But there is no log on INTERNAL client that accessed the multicast stream.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/34389iB016171D9D8E5066/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 14 Jun 2021 16:13:25 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413012#M92909</guid>
      <dc:creator>raji_toor</dc:creator>
      <dc:date>2021-06-14T16:13:25Z</dc:date>
    </item>
    <item>
      <title>Re: Multicast, who accessed??</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413082#M92922</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;Should there be? The tcp session will show the traffic from where it was initiated.&lt;/P&gt;
&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Mon, 14 Jun 2021 20:40:27 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413082#M92922</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2021-06-14T20:40:27Z</dc:date>
    </item>
    <item>
      <title>Re: Multicast, who accessed??</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413101#M92925</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/27580"&gt;@OtakarKlier&lt;/a&gt;&amp;nbsp;In the VLC streaming test no session was created from client to MCAST server.&lt;/P&gt;&lt;P&gt;Its the server going from server zone to multicast zone creating session.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;So essentially in this scenario there is no easy way to control access for multicast with policies and only option is to restrict in the VR. Am I right?&lt;/P&gt;</description>
      <pubDate>Mon, 14 Jun 2021 21:39:48 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413101#M92925</guid>
      <dc:creator>raji_toor</dc:creator>
      <dc:date>2021-06-14T21:39:48Z</dc:date>
    </item>
    <item>
      <title>Re: Multicast, who accessed??</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413307#M92952</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;Well the policies can still be used to limit the destinations IP's/Subnets you want the traffic to go to so they are still relevant.&lt;/P&gt;
&lt;P&gt;Hope that helps.&lt;/P&gt;</description>
      <pubDate>Tue, 15 Jun 2021 17:02:52 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413307#M92952</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2021-06-15T17:02:52Z</dc:date>
    </item>
    <item>
      <title>Re: Multicast, who accessed??</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413437#M92966</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/27580"&gt;@OtakarKlier&lt;/a&gt;&amp;nbsp; As per the network explained previously, I see this in logs. I cannot think of how you are suggesting i can control with policies.&amp;nbsp; There is no traffic directly to/from mcast server(172.20.0.46) to/from client(10.x.x.x) as this will be the unicast traffic and not multicast. Only traffic is see here is going from mcast server to the multicast address. I have no logs of client to/from accessing this multicast address(239.255.100.2) although client is able to view the muticast stream.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 981px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/34428iD1B9F206700C3395/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 15 Jun 2021 23:27:51 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413437#M92966</guid>
      <dc:creator>raji_toor</dc:creator>
      <dc:date>2021-06-15T23:27:51Z</dc:date>
    </item>
    <item>
      <title>Re: Multicast, who accessed??</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413642#M92998</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;What zone are the clients that you would like to see the traffic to in? If the clients are in a different zone or subnet, you can either set a deny to a destination subnet or zone.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Wed, 16 Jun 2021 18:45:15 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/multicast-who-accessed/m-p/413642#M92998</guid>
      <dc:creator>OtakarKlier</dc:creator>
      <dc:date>2021-06-16T18:45:15Z</dc:date>
    </item>
  </channel>
</rss>

