https://live.paloaltonetworks.com/t5/general-topics/pa-200-and-arp/m-p/118960#M45704 <P>a NAT policy will create a proxy-arp entry if the destination address is not on the firewall itself. can you verify in your NAT rules that the IP for which you have a duplicate ARP entry is not listed as a destination?</P> Wed, 12 Oct 2016 07:15:30 GMT reaper 2016-10-12T07:15:30Z https://live.paloaltonetworks.com/t5/general-topics/pa-200-and-arp/m-p/118959#M45703 <P>I have a duplicate arp entry in a PA-200 I cannot get rid of. I have no clue where it is coming from. Its not HA just a standalone 200 on a single /24. I have looked at every device on the network and I cant figure it out. Any suggestions?</P> Wed, 12 Oct 2016 06:51:19 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-200-and-arp/m-p/118959#M45703 quarinteen 2016-10-12T06:51:19Z https://live.paloaltonetworks.com/t5/general-topics/pa-200-and-arp/m-p/118960#M45704 <P>a NAT policy will create a proxy-arp entry if the destination address is not on the firewall itself. can you verify in your NAT rules that the IP for which you have a duplicate ARP entry is not listed as a destination?</P> Wed, 12 Oct 2016 07:15:30 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-200-and-arp/m-p/118960#M45704 reaper 2016-10-12T07:15:30Z