The firewall can terminate a generic routing encapsulation
(GRE) tunnel to connect two endpoints in a point-to-point, logical
Palo Alto Networks next-generation firewalls
can now terminate generic routing encapsulation (GRE) tunnels, which
enables you to route or forward packets to a GRE tunnel. The GRE tunnel connects two endpoints
in a point-to-point, logical link between the firewall and another
device. GRE tunnels are simple to use and are often the tunneling
protocol of choice for point-to-point connectivity, especially to
services in the cloud or to partner networks.
Create a GRE
tunnel when you want to direct packets that are destined for an
IP address to take a certain point-to-point path, such as to a cloud-based
proxy or to a partner network. The packets travel in the GRE tunnel
to the cloud service while on their way to the destination address,
which enables the cloud service to enforce its services or policies
on the packets.
The following figure is an example of a GRE
tunnel connecting the firewall across the internet to a cloud service.