About RyanJohnstone1144

I have always found this failover mechanism within Azure to be impractically slow. I look forward to the day when it improves. ... View more

Thank you for posting question @RyanJohnstone1144   I was researching this and eventually ended up with opening a ticket to Microsoft to get definitive answer. The answer is: unfortunately it is not possible and at least at this moment there is no other alternative way capture traffic. I am sure you are aware of data plane packet capture in Firewall: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0 If you requirement is to confirm that traffic is egressing an interface, potentially this might be up to the job.   Kind Regards Pavel ... View more

I also need to do this. Network Watcher works fine between Azure VMs, but it's not possible to add the extension on a Palo Alto VM. I see my traffic arrive on the PA, but need to trace it onwards to the Azure VM, but can't. It seems that I have correct NSG setup, but cannot get to the VM. Packet capture in PA is clunky with wireshark, I just need a simple view of what's happening. ... View more

Thanks for the reply.   looks like issue is to do with EC x25519 being used by our server.  i see this is supported on PAN OS 10 with TLS1.3 and is NIST approved.   Do you know if support for this will be added to PAN OS 9.0?  i am reluctant to ask our server team to disable x25519 across our server estate or move up to 10.0 at this current time.   Thanks   Ryan ... View more