RE: https://mastodon.social/@hrbrmstr/117529813223970582
Confirmed PAN-OS is disabled by default:
https://docs.paloaltonetworks.com/ngfw/help/12-2/device/device-setup-session/tcp-settings
Also confirmed that it is disabled by default on F5 BIG-IP:
@cR0w some Kagi-ing suggests PAN-OS zone protection defaults to following the global MPTCP setting, and the global setting defaults to stripping the option, so MPTCP connections are downgraded to plain TCP. F5 BIG-IP's TCP profile mptcp value defaults to disable, which excludes M
Mastodon.socialhrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 (@[email protected])@[email protected] some Kagi-ing suggests PAN-OS zone protection defaults to following the global MPTCP setting, and the global setting defaults to stripping the option, so MPTCP connections are downgraded to plain TCP. F5 BIG-IP's TCP profile mptcp value defaults to disable, which excludes MPTCP through the virtual server. NetScaler's TCP profile mptcp attribute defaults to DISABLED. (1/2)