TAP Mode

[umar00o]

Hi,

I want to know if there is a way to forward all switch traffic to single Destination port of Palo alto. So far I can find on switch side you can make a singel port source and destination the PA port. Just want to know if we can monitor all ports on the switch?

Thanks

[reaper]

you could theoretically forward _all_ ports to a single port on the switch, but unless your network doesn't have a lot of traffic that will bring down your switch

you may want to ask this on the forum of your preferred switch manufacturer 😄

if you really need to monitor everything you could supersegment your switch so each port has a single vlan, then connect the firewall via a trunk and create a subinterface for each vlan, that way all traffic needs to go through the firewall.

you could set it to layer2 mode if you don't want to route and subnet

[umar00o]

I see, Thank you very much I'll try this in a lab and see how it goes.

Thanks

[RobinClayton]

"Monitor", "Mirror" or "SPAN" are the general terms your probably looking for..

All our switch traffic is mirrored out to the PA Tap interface for inspection.