Adding MFA to Pre-login GlobalProtect

Global Protect VPN Solution is defined with Pre-login and always-on VPN features.

Workflow:

1. Once machine is booted and before user login, Machine is authenticated based on certificate and identified in logs with (Pre-login) user
2. Pre-login access is re

Nested groups configuration

Hi, Do i need to be able to manually configure the nested groups in the migration tool to be able to successfully migrate them to Palo Alto? Please let me know what version of the migration tool supports supports this configuration within the tool an

VPN Issue Between PA and WATCHGUARD

Dear All 

I'm facing one issue relate to VPN between PA and WG.
I am using 3DES/SHA1/PFS2, it is not working till i disable PFS-2 on Phase-2.

2018-05-10 10:44:10.483 +0700 [DEBG]: { : 40}: keyacquire received: x.x.x.x[0] => y.y.y.y[0]
2018-05-10 10:44:10

Panorama Security Rules Export in Human Readable Format- Excel Sheet

Hi,

I am new to Palto Alto. I have a requirement to download security rules of several firewalls so it can be viewed bu audit teams.

I have downloaded the running configuration file of target firewalls I need and I have been able to format the output

Trouble getting through to VMWare interfaces from VM-100

Hi,

We have migrated a PA500 500 config to a newly installed VM-100 (ver. 8.1) running as the only VM under a standalone ESXi 6.5 host (not in vSphere).  All interfaces are assigned and I have verified the assignment of each by plugging and unplugging

Transparent Proxy

Hello,

I am new with PA family and currently evaluating PA-3220 / PA-3060 appliance

I would like to know if i can implement transparent proxy feature with the above applaince for all my users including branch office without making major changes to net

CHACHA20_POLY1305 Support?

Anyone know or heard when we might get CHACHA20_POLY1305 cipher support for Inbound Decryption?

I finally came across a server using it... my Enterprise Services team is setting up a Papercut on-prem server and it seems to be running multiple web ser

MineMeld-engine FATAL

Hello Folks,

I recenlty ran through the MineMeld installation onto Ubuntu 14.0.4. I noticed during the installation of MineMeld a few errors or notifications showed up regarding pip and sudo as seen below:

The directory '/home/eddie/.cache/pip/ht

PA-5000 series - big hit?

Among our user base ( Indeni ), the majority of PANW devices deployed globally are the PA-5000 series, mostly PA-5060, PA-5050 and some PA-5220. Anyone knows why?