Multicast required for Intrazone policy?

[CPatterson1]

My understanding is the intrazone default policy allowed anything in a layer 3 vlan to talk to anything in that same vlan on any protocol. So if I have layer 3 vlan of 10.31.25.0/24 and host a is 10.31.25.148 and host b is 10.31.25.210. In theory everything is allowed between the two of them. Does that include Multicast? Note Multicast is NOT enabled on the VR (virtual router)

Thank you

[TomYoung]

Hi @CPatterson1 ,

Are host a and host b connected to layer 2 ports on the firewall?  Then all traffic is allowed between the two hosts with the intrazone-default rule as long as they are in the same L2 zone.  Also, the 5th paragraph implies that L2 ports do not forward multicast packets -> https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/ip-multicast-overview.

If the hosts are connected to a switch, then the switch will forward packets (including multicast) directly between the hosts and not to the firewall.

Thanks,

Tom