My paloalto firewall isn't picking up any traffic or showing any sessions.

[foresightis]

So i recently configured the Ethernet ports on the firewall and i plugged an Ethernet cable from my switch to port 1 on my firewall and I'm not seeing any traffic logs on the monitor board (only system logs and configuration logs are showing) and it's showing no active sessions. I also plugged the mgmt port to the switch.

*Note: my internet goes into the switch's port 1, I've tried plugging it to one of the ports on the firewall but still the same thing.

please help me out.

[ShaiW]

Hi

The firewall's MGT port is Out-of-Band - it is used for you connecting to web-management only and for the firewall to update itself. This port does not pass network traffic.

Data ports (eth1/1-eth1/8) - these pass network traffic. For this to work you need in & out ports:

1. Set up 2 Layer-3 Ethernet ports, one for LAN and another for WAN (for example). The firewall needs to pass traffic between 2 data ports.

2. Assign each data port a zone, for example 'trust' zone for LAN and 'untrust' zone for WAN (this will be used in policy)

3. Assign IPv4 for the data ports. For example 192.168.10.254/24 on eth1/2 and the default GW for LAN computers is 192.168.10.254 which the firewall will receive. For the WAN port - this is usually details about your ISP connectivity to the internet.

4. Policy (Security & NAT) to allow traffic LAN to WAN and to perform NAT if necessary. Make sure 'log at session end' is selected in the actions tab.

5. Create an account on https://beacon.paloaltonetworks.com, search for edu-110 and register for 'Firewall 9.1 Essentials: Configuration and Management' - this should be 13 hours long and will teach you firewall basics.

Hope this helps,

Shai