05-23-2017 06:17 AM
05-23-2017 06:26 AM
MGMT (out of band interface) cannot be a part of the zone, so no traffic logs can be generated. but you still can do a PCAP if that is helps;
05-23-2017 06:26 AM
MGMT (out of band interface) cannot be a part of the zone, so no traffic logs can be generated. but you still can do a PCAP if that is helps;
05-23-2017 06:54 AM
One big advantage of Palo is seperate dataplane (network ports, HA2, HA3) and control plane (mgmt port, HA1).
Even smallest 2 core firewall has one cpu core dedicated for checking passthrough traffic and other for management.
As a result you can manage the box even if you are under attack or your dataplane is fully utilized.
For that reason you can't use regular packet capture but have to use tcpdump that @TranceforLife pointed out.
05-26-2017 05:21 AM
Awesome thats what I was after!
Thanks
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
