- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
01-04-2025 02:03 AM
It sounds like you're trying to get the Palo Alto NGFW VM to reflect the true status of the physical NICs on your ESXi host, which can be a bit tricky. Here are a few steps you can try:
Promiscuous Mode: Ensure that Promiscuous Mode is enabled on the vSwitch. This allows the VM to see all network traffic.
MAC Address Changes: Enable MAC Address Changes on the vSwitch. This allows the VM to change its MAC address, which is often necessary for proper operation.
Forged Transmits: Enable Forged Transmits on the vSwitch. This allows the VM to send packets with a different source MAC address than its own.
Direct NIC Assignment: Assign the physical NICs directly to the VM-Series Firewall instead of using a vSwitch. This might help in reflecting the true status of the NICs.