About register

We have a Vwire configuration with a paloalto (5.0.6) between a third-party router and the wan port. Security policy is allow any - any for both directions/security zones, log at session start an end. Everything works (as expected), all VPN Tunnels on the third party device are up and running, b ut we dont see any ipsec-esp traffic in the traffic monitor, or ACC stats. If we make a packet capture on the paloalto we do see that the ipsec-esp packets are passing through the vwire. We already tried du define two additional rules with ipsec as application - but that does not change anything. Any hints ? ... View more

In this document is described how the NAT function at the Palo Alto. https://live.paloaltonetworks.com/docs/DOC-1517 Has anything changed in the 5, in contrast to 4.1er? So far, the destination NAT zone was generally on the incoming interface as the source and destination zone. In the document is on page 20 (case3) and page 28 (Destination NAT) is the NAT-destination once (untrust / trust) and once untrust/ untrust with a service port. Which act as is now correct? ... View more