Hi, all I have questions about Application Override traffic packet capture. Q1. when i enable App override, Overridden traffic is offloaded without reaching Dataplane. is it correct? Q2. Overridden Initial packet such as UDP when session setup is offloaded? Q3. I think any traffic that is offloaded can't do packet capture without disable hardware offload off but i don't know how i could capture overridden packet https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/monitoring/disable-hardware-offload# admin guide says. For example, encrypted traffic (SSL/SSH), network protocols (OSPF, BGP, RIP), application overrides, and terminating applications can be offloaded to the FPGA and therefore are excluded from packet captures by default Thanks.
... View more