DHCP Data Collection by Traffic Type

Enhanced Application log (EAL) coverage differs when the firewall receives unicast and broadcast DHCP traffic.
The tables below show Enhanced Application log (EAL) coverage when the firewall interface receiving unicast and broadcast DHCP traffic is in different modes.
Unicast DHCP Traffic
Firewall Interface Deployment Mode
DHCP EAL Generated
Virtual Wire
Yes
Tap
Yes
Layer 2
Yes
Layer 3
Yes
Broadcast DHCP Traffic
Firewall Interface Deployment Mode
DHCP EAL Generated
Virtual Wire
Yes
Tap
No
Layer 2
No
Layer 3
No
DHCP server on the firewall (L3, L2 with VLAN interface)
Yes*
DHCP relay agent on the firewall (L3, L2 with VLAN interface)
Yes
* The method for generating EALs when the firewall is the DHCP server is dependent on its PAN-OS version:

Recommended For You