About CobaltGroup

I was indeed under the impression that would have been the case.   I'm able to capture the number of session globally on the device, but would SNMP allow you also to capture the sessions specific on a certain interface?   ... View more

I actually did do the test with a couple of different files. I used the eicar.com file, I use the "wildfire-test-pe-file.exe" file and I downloaded some actual malware.   Even though I see a hit in the decryption policy, I'm under the impression nothing is being scanned, because in the threats nothing at all shows up.   ... View more

Thank you for your answer. So today I was looking at how to design and I have a question about the approach   I have interface ethernet1/3 configured as virtual wire with subinterface .500 and .600 I have interface ethernet1/4 configured as virtual wire with subinterface .501 and .601   Vlan 500 and 600 equal the internet/WAN side, vlan 501 and 601 equal the protected/firewall internal/LAN side   All traffic that arrives in VLAN 500 needs to be forwarded to VLAN 501 All traffic that arrives in VLAN 600 needs to be forwarded to VLAN 601   Should I create 2 seperate virtual wires between 1) interface ethernet1/3.500 and ethernet1/3.501 2) interface ethernet1/4.600 and ethernet1/3.601   Or should I create 1 virtual wire between interface ethernet1/3 and interace ethernet1/4, where I will allow vlan 500 and 600 to be trunked. But in this second case, how am I going to define the flow that traffic from VLAN 500 needs to go to VLAN501?   Hope my question is clear.  ... View more

True that, nevertheless there should not be a reason why a VM wouldnt work 🙂 ... View more

Certainly something to consider once I can convince the customers 🙂   I'm not going to make that investment without knowing it actually works. Since I have stacks of servers anyways, the VM was the quickest en most cost efficient solution.   ... View more

Well cost is obviously always a reason, nevertheless a box is also a server in the end. And after cycling through a few other brands, I can't say the hardware appliances are always that much more trustworthy 🙂   ... View more

For the time being it's enough, as I'm doing a PoC for the customers, not everything is behind the firewall yet. But since the device already failed twice during the PoC, I currently look a bit like an idiot with a bad product.   Hence my question if there was any preferred/recommended hardware, but avoid any potential issues in that domain.  ... View more

That is of course possible.   So because support was not able to find anything, I have moved the connection of the virtual wire to broadcom chipset NICs instead of intel chipset NICs, to test if it's maybe related to the interfaces.   If the connections are still freezing, I'm going to move the firewall completely to a different box, to eliminate the fact that it might be hardware related.  ... View more

We have a rather large setup behind the firewall, so we will be using multiple split virtual wires, therefore I would require 8 interfaces   ... View more

Thank you for your reply.   We looked at the firewall with support when it was not working, but unfortunately support can't find the issue, so we have to troubleshoot more deeply, perhaps on hardware layer ...   ... View more

To explain your question about patched, I have vlan 10 which is unprotected (in front of the palo) and vlan 11 which is protected (behind the palo)   So topology wise Switch VLAN 10 <=> Palo Virtual Wire <=> Switch VLAN 11 Hosts in vlan 10 and vlan 11 use exactly the same IP addressen, and by simply changing the switch port on switch level, I can choose if the host needs to be firewalled yes or no,   The above example allow you to only connect vlan 10 to vlan 11. Now what if I want to connect VLAN 10 to VLAN 11 and VLAN 20 to VLAN 21 over the same virtual wire   Switch Trunk 10,20 <=> Palo Virtual Wire <=> Switch Trunk 11, 21 Is there any want to tell the virtual wire that VLAN 10 and 11 are connected to eachother, and VLAN 20 and 21.   I hope this clarifies my setup.   ... View more