Vwire on MPLS link ?

[bjocque]

Would vwire on an MPLS link be supported ?

I guess that traffic will be passed, but will the firewall be able to see/inspect the real data ( and thus strip of the mpls headers ?)

Bart.

[kadak · Accepted solution]

Hello Bart,

PAN firewall in vwire mode can be deployed in a MPLS environment and the traffic would just run fine.We currently do not have the capability to inspect in MPLS environments, however, there is a feature request (FR ID : 1050) submitted to your development team for it to be included in future releases. You can also request your SE to vote for it.

Hope that helps!

Thanks and regards,

Kunal Adak

[bjocque]

ok, thanks a lot for the clear answer !

[mario11584]

So, just to clarify, if I use Vwire to pass traffic through the firewall it won't inspect the traffic? So, I won't have any application specific details about the MPLS traffic? How does the PA display the traffic in the logs?