Policy before voting in Palo Alto.
What do you mean by policy based poverty?
First of all, let's understand then how we can use what are use case scenario.
I mean, you might as well let's first of all, look for the agenda.
We look forward for the what is policy based poverty and how policy then poverty works on all PBS,
PBS, PBS mean basically a policy based in Guantanamo.
That's the idea we can configure from parliament and configuration and testing.
So first of all, let's understand what is a policy based formula, if you are it.
I mean, mostly people come from CCMA, you can be like, you know, at least that kind of background
where they understand the policy based around the.
In the normal routine, the normal routine forward, the package based on the destination IP address.
So, for example, if we if our machine wants to go to our source, I mean, for example, if there
is a society.
OK, that's my society and definition, it is like.
When the suicide bombers come to the Palo Alto.
Folk are not going to be the destination I.P. address is existing on which direction and it forward
a package based on the decision based on the destination, not the source.
It doesn't give away the source it is coming from.
Maybe it's coming from a different IP flight, but it checked for the destination and then checked the
outgoing interface.
Outgoing interface gave me, for example, like the next four five.
So this is a normal day to day hoping that that's a normal day to day.
OK.
And in the normal building, that's how it works, but in the in such a situation where we need a source
means something.
So the decision should be made based on the source.
Who is the source?
OK, that's called a policy.
This in Cisco board, OK?
Other other similar things, but normally go as well, policy based.
OK.
OK, so in the PBR, what happened at the CI?
A. does not make on the destination, but it may be on the suicide frequencies coming from it matches
the IP with the destination network and forward them to the next match.
So for example in a situation like this.
What we can do there is I one, so you can see that the traffic for the AA1 to reach, you wonder why
no one there to park existing one is to react to the two and one is existing on the ultrafine.
Both must both.
Maybe the sequel, in a sense, know what we can do is we can apply this on our odd one if the traffic
is coming from this interface.
So rather than follow the default bot or the default routing table, look forward for the if the traffic
is coming from our one with maybe certain IP, then it should be forwarding to this decide and not decide
something like that.
So this is called a keyboard or policy based routing that's just explaining, you know, normal PDA.
This is the example of how we can achieve this.
We apply the road map and then verify that.
In the policy, voting allow you to implement policy that selectively cause people to take over.
I think a definition this year about the definition of insanity is applied to incoming back in the pack
and it's coming.
And what the social media traffic impossibility required a roadmap to implement the policy, national
standards, etc, etc. But that's just explaining, you know, what can we do not know here?
If you look at the follow on to, for example.
If we look at a device.
So you can see in the policy, Michael, I think you were explaining I was explaining to you, you will
be considering everything will be considered in the actual device group because keep in mind other mean
devices, each device group is responsible for object and policy and each device group is where we have
our main devices.
So basically, if you want to see, you can see we happens configure security, not policy.
But this is a policy with something and in the policy bootstrapping we will be configuring from here.
So its destination and poverty, but that's just a combination.
OK, but before we move into that, I just want to explain to you.
For example, I just can't explain it to you in a normal day to the situation, how this one will be
policy based forwarding, can I just show you this diagram?
For example, we have we have a lab environment, and that lab environment is actually is existing in
the.
And then this firewall is connected to, let's say, eighty four to.
OK, you decide it's a for example.
And then we are saying this is the.
I'm just giving you an example, in a day to day life, how we can fix a environment where we can use
it, but the growth, for example, most likely is coming on this side.
So this is, for example, the traffic traffic is falling, as you can see, this traffic is forwarding
to the Internet site and that's why Internet traffic.
OK.
So in the example in life, the resulting based on the opening day, but they're not actively saying
that if that if you want to go to the for example, to that my Internet traffic is going on this site.
That's before the piano.
OK.
But let's say the company has applied just the proxy or proxy or maybe semantics or things like that.
Now, what they want to do is they want all the traffic must be a proxy.
So this must go to the proxy first and then it will go to the Internet, although you wouldn't be doing
a web browsing and, you know, malware and scanning and all those things in this kind of situation
where the normal traffic is going to all the traffic going to the Internet or maybe other Zune or something
like that.
But we just want to make sure that traffic must go to the HDD fibre to the node, to the proxy post.
OK, that's that's a proxy.
And then it goes to the heart, will appeal to the whole thing table again.
The traffic will come back, come to the proxy force, then go to the landside.
So this is the kind of situation we are in any sort of life example I'm giving you where I design a
situation.
We want a situation like this.
So basically, in this situation, we want the EU to be.
Initiative.
Traffic and traffic must go to the.
OK.
So nobody is going to decide what we want this traffic to go to safest.
So Proxicom do his job and then the traffic will be coming to the Internet site.
That's the kind of situation we are in this situation, we can make sure the right example.
I'm giving you the desired position.
So all the traffic from maybe this network or maybe all the other networks is coming to the point where
the activity is normally divert the traffic that is going to the Internet.
So that's the example of the use cases.
I agree with you, but let's go into our environment and our environment.
What we have seen, we know the normal traffic is going to be through the budget via the Palo Alto and
exploring the default routing to the Internet through this interface, 200 to 250 for something like
that.
This is a.
This is coming as of now, no, let's.
What we want to do, we want to make sure that the traffic is coming from here.
Just a DNS traffic, we want to make sure that you do not follow this path, but it must follow maybe
branch routing and then it should be forwarding to the Internet routing and that is going to decide
just what the DNS.
Right.
If I go and face my.
Log to my gas machine.
My best machine is 11.
If he wakes up, can you see why?