Palo Alto Networks firewall provides NAT ALG support for the following protocols: FTP, H.225, H.248, MGCP, MySQL, Oracle/SQLNet/TNS, RPC, RSH, RTSP, SCCP, SIP, and UNIStim.īut it is not clear which is the default behavior of the firewall with these services.
Making some research online I found threads like these, in which is clearly said that the solution is to disable the ALG: There is no "deny" on the firewall, I was wondering if it can be related to the ALG functionality.
Making a quick tcpdump of incoming packets on the server in which my application is running, I noticed on wireshark that, on the response packet of the DB, there is this error: Malformed Packet: TNS. I actually reach the database, but I can't collect the information that I need. There is a PaloAlto firewall between my application and the DB. I've an application who has to query an Oracle database to get information from it.
0 kommentar(er)
