Expressway-E and C and NAT and VW

[simsim]

Hi,

I have deployed Expressway (cisco ToIP) E and C  as per the diagram below .PA is in VW mode .

Does it work  without any changes in the PA ? 

Or Is there any policy must be created ? 

Thanks 

[BPry · Accepted solution]

@simsim,

This really depends on how you actually have the VWIRE setup. Without knowing what you config actually looks like it's kind of hard to say. 

Couple different scenarios

1) You have security policies on the Palo Alto that actually limit source/destinaton and the applications allowed to pass through the vwire. In this situation yes, you'd likely need to create some additional policy. 

2) You have the most basic vwire setup where the traffic is simply inspected but by default will allow everything to pass. In this situaiton you wouldn't need to create any additional policies. 

Really depends on your configuration, with the information given it's pretty much impossible to tell.