Packet Flow Sequence in PAN-OS

Palo Alto Networks next-generation firewalls use a unique Single Pass Parallel Processing (SP3) Architecture – which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology



Interface --->L2 to L3  (+NAT)--->App ID --->Content ID --->




**NAT***

Outbound (Company to Outside)
-Security  (INSIDE) 10.x.x.x --- fw----> (OUTSIDE) 172.24.x.x (actual destination)
-NAT Policy    (INSIDE) 10.x.x.x ---fw---->(OUTSIDE) 172.24.x.x(actual destination)  ---source translation


Inbound (Outside to Company)
-Security  (OUTSIDE)  172.24.x.x  ----FW----->  (INSIDE)  10.x.x.x
-NAT        (OUTSIDE)  172.24.x.x  ---FW------>  (OUTSIDE)  NATIP    translation type  : destination type  (actual IP)