I use kerberos auth for Global Protect on PANOS-4.1.x.
Remote users fail auth for GP connection that it appear 'invalid username'.
So I want to collect PCAP on kerberos server and PA device.
I know that PA use mgmt interface for communicated kerberos.
I want to change interface from mgmt for collected PCAP.
What does it change in 'service route configuration'???
Since you can not choose a service or application for routes on the right side: it is for all traffic!
And it will overrule all settings set on the left.
Ex. DNS server and Kerberos server are same server
Source Address: MGT
Destination: IP of your kerberos server
Source Address: IP of your internal interface
=> DNS traffic wil NOT use the MGT interface, but hit on the right side route rules and use you internal interface as source...
But I guess since its going to the same server you would probably want to use the same source Address, but you never know: something to keep in mind....
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!