How to allow GRE protocol 47 through Palo Alto FW?

[Jedi_D]

Dear Friends, 

I'd be grateful if you could help me with this ...

I'd like to allow GRE traffic (protocol 47) through my Palo Alto FW. I want to allow all the GRE traffic through and not terminate a GRE tunnel on the PA itself. Appologies if this is simple, please can someone point out how I can do this? Do I need to create a FW policy to allow GRE protocol 47? Any suggestions or any documents references would be much appreicated.

DP

[BPry · Accepted solution]

@Jedi_D,

You should simply have to allow the application 'gre' to traverse the firewall across the required zones. 

[Jedi_D]

 Thank you for your help and response Bpry,

Is this application already available or should I define one? Also please could you suggest what the service should be? Could it be "service-default"? 

Thanks and regards,

[BPry · Accepted solution]

@Jedi_D,

The GRE application should already be defined if you are running at least a somewhat currently version of Applications and Threats. You should be fine with leaving the service as application-default.