intra-interface (packets enter and exit same interface) ?

[mpgioia]

This is a problem for other vendors (and something must be enabled/configured to allow this to occur).

Have not tried this in PANOS, but wondering if this just works or is it a similar scenario where you must enable something in PANOS ?

http://www.networkstraining.com/permitting-traffic-to-enter-and-exit-the-same-interface-same-securit...

[mpgioia]

@BPry , @TranceforLife. Music to my ears. Thankyou.

[reaper · Accepted solution]

---

TranceforLife wrote:

Hi,

If you are running PAN-OS 6.1 or above intrazone traffic permitted by default with intrazone-defult policy.

If you are running lower then 6.1 PAN-OS you ahve to create a policy to allow same zone traffic:

https://live.paloaltonetworks.com/t5/Management-Articles/What-are-Universal-Intrazone-and-Interzone-...

Thx,

Myky 

---

that's incorrect, intrazone traffic has always been allowed. PAN-OS 6.1 just made the policies visible 🙂

Depending on what you're trying to accomplish, you may need U-turn NAT to force returning packets back to the firewall interface so sessions process both directions of the flow: How to Configure U-Turn NAT

other than that there's no restrictions in bouncing traffic back out of the same interface

[TranceforLife]

@reaper yes absolutely. Sorry my bad