On a virtual wire, the Palo Alto Networks firewall can pass
Cisco LACP traffic only when the links are not
aggregated on the firewall. On a virtual wire, if the links are aggregated, then the
firewall could forward the packets to the wrong port in Aggregated Ethernet, which will
cause LACP not to function between peers.