All I only setup Vwire and Zone, Each zone has one interface. we have a few (5)zones. For example zone1=interface1 zone2=interface2, etc so user started ftp session, it will pass two zones Z1-Z2--->Z3-Z4---->ftp.sample.com, so we see two sessions for same connections. Two sessions will be contributed to connection tables. PA will inspect twice. Is there better way to configure PA Can we put more than 1 interface in Zone ? Zone 4=interface 2 Zone 1=interface 1,5,7 This may help double sessions but not sure if there is production deployment in real network
... View more