intra-interface (packets enter and exit same interface) ?

Showing results for 
Show  only  | Search instead for 
Did you mean: 

intra-interface (packets enter and exit same interface) ?

L3 Networker

This is a problem for other vendors (and something must be enabled/configured to allow this to occur).

Have not tried this in PANOS, but wondering if this just works or is it a similar scenario where you must enable something in PANOS ?


@BPry , @TranceforLife. Music to my ears. Thankyou.

TranceforLife wrote:



If you are running PAN-OS 6.1 or above intrazone traffic permitted by default with intrazone-defult policy.

If you are running lower then 6.1 PAN-OS you ahve to create a policy to allow same zone traffic:




that's incorrect, intrazone traffic has always been allowed. PAN-OS 6.1 just made the policies visible 🙂


Depending on what you're trying to accomplish, you may need U-turn NAT to force returning packets back to the firewall interface so sessions process both directions of the flow: How to Configure U-Turn NAT


other than that there's no restrictions in bouncing traffic back out of the same interface



Tom Piens
PANgurus - SASE and Strata specialist; (co)managed services, VAR and consultancy

@reaper yes absolutely. Sorry my bad
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!