types of PA firewall inspection

[o_hernandez]

Hello community!

I have a question, checking my stick high firewall, I wanted to know if in my firewall I could configure the inspection mode. I have seen another product from another manufacturer that has 2 inspection modes that are the flow mode and the proxy mode. I would like to know if in stick high I also have that functionality available, if so please appreciate being able to share information to be able to review it and be able to perform the configuration.

Thank you very much for your support.

Regards.

[OtakarKlier]

Hello,

Not entirely sure what you are asking. However the PAN can be configured in several ways that can inspect the traffic. Perhaps if you could clarify your question, we could help out further.

Regards,

[o_hernandez]

Thank you for your response, and sorry for not letting me understand.

For example, the Fortigate firewall has 2 inspection modes, the base flow mode and the proxy mode, my question is The Palo Alto firewall, does it also have these types of inspection modes?

[MP18]

In Palo Alto we have different  ways to configure firewall like in layer 3, layer 2, wire etc.?

This depends the on topology of the network.

Is this you are asking for?

[o_hernandez]

@MP18 No, I want to know if Palo Alto firewall has inspection modes similar to the inspection mode of fortigate firewalls (proxy and flow mode).

[MP18]

I do not think so it has similar to Fortigate Firewall.

Lets see if someone chimes in

[Remo · Accepted solution]

Hi @o_hernandez 

As @MP18 correctly assumes, this is not like it is possible with fortigate firewalls. PaloAlto only supports flow based inspection.

[o_hernandez]

@Remo  Thank you for your comment, you have information that you could share about what you mentioned to be able to have more extensive operation of the PA firewall.

[Remo]

@o_hernandez what do you mean about more extensive operation information? You cannot cpnfigure something else than flow based inspection - or I did not understand your question.

More information about packet processing on a paloalto firewall you can find here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVHCA0

[o_hernandez]

Thanks you @Remo