01-07-2014 05:34 AM
Is there any way that I could feed a pcap into the firewall?
What I would like to do is take a pcap and run it through a monitor port to test out some rules and IDS settings. Right now my plan is to use tcpreplay, but I was curious if there was any way to do this natively in the firewall.
01-07-2014 05:57 AM
I am afraid if there is a way to import the pcaps into the firewall, and this requires a feature request. Please contact your SE to add this feature.
If you want to test the rules and the IDS settings, configure 2 interfaces on the PANFW as part of a Vwire pair. Connect bothf these interfaces to a replay server ( for traffic coming in both the directions, ie client to server and server to client), and then replay the pcap from the replay server.
Hope that Helps!
BR,
Karthik RP
01-07-2014 05:57 AM
I am afraid if there is a way to import the pcaps into the firewall, and this requires a feature request. Please contact your SE to add this feature.
If you want to test the rules and the IDS settings, configure 2 interfaces on the PANFW as part of a Vwire pair. Connect bothf these interfaces to a replay server ( for traffic coming in both the directions, ie client to server and server to client), and then replay the pcap from the replay server.
Hope that Helps!
BR,
Karthik RP
01-07-2014 07:07 AM
I don't have access to that.
"Access to this place or content is restricted."
01-07-2014 07:08 AM
Thanks for the response kprakash. I just thought it would be cool if I was able to do this while I was setting up a replay.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
