Website Access Issue from one of branch office

Hello All,

We have PA-850 implemented across the sites (4 sites), there is a URL www.crunchydata.com is not accessible from one of Branch Office in US, while there is no issue accessing same URL from other branches. However

- i have checked and confi

ECMP Single Interface

I have an HA pair of firewalls in my data center. I have a single ISP that provides two routers for internet access. I use HSRP on those routers, which obviously share the same subnet on the inside interface that connects to the outside interface of

10.2.3 Software Update Install Error

The firmware is not being updated.

create a new Vsys queries.

Wish to configure new VSYS, will it cause any issue while configuring?

Do we need to reboot after enabling Multi-vsys opention?

Will it will cause network disruption over default VSYS1?

· Will it will affect the functionality of Access Control Poli

Global Protect have issue after firewall upgrade to 10.2.6

Hi,

Yesterday we upgrade Pan-OS version from 9.1.13 to 10.2.6. GP version on 5.2.12. 

Now we have issue with GP as we have difficulties to connect the Gateway with error Cookie expired/Authentication failed

We can confirm the Radius server is rea

IPSEC VPN tunnel

We have a site to site VPN tunnel that fails when the vendor side tries to Re-Key. We are seeing no U-Turn policy blocking them. We can ReKey from outside without issue. 

1. Has anyone seen this issue previously and been able to fix it?

2. Does any

Palo Alto Application ms-office365-base not working

Hello Everybody,

i thought i try the community for a change with my problem.

One of our departments recently asked for a policy change, so their server could access a ressource in the internet.

The rule is as simple as it gets. Source is their Serv

Global protect VPN not working

Hey , Here- i am facing issue with global protect.

Log forwarding profile for Correlated Events?

Hello all,

It appears that we have had at least a single correlated event in the past seven days, but did not recieve any alert related (via any configured log forwarding profile).

It appears the each match that was correlated did perform a log actio

Changing HA from Active/Active to Active/Passive

I would like to know if anyone has changed HA from AA to AP and has configured floating IP in AA mode. How was the solution to bring it to the AP?

Thanks a lot.

PAN 10.2 (PA850) high memory usage normal?

I've just started upgrading our firewalls from 9.1.16 to 10.2.7 and noticed the first (and so far only) firewall pair upgraded caused an enormous jump in memory consumption.  Is it normal for version 10.2.7 on a PA850 to consume 68-70% of memory?  Th

Palo Alto Clearpass integration disconnecting

We are looking to utilize Cleaspass sending information to ours Palos for the purpose of user-id. We have this applied in some test groups but we are running into an issue where after a few days the connection appears to time out and the Palos stop r

GlobalProtect: Port 4501 UDP

Hi all,

I understand that GlobalProtect uses TCP 443 and UDP 4501... But what is there any more information available about GlobalProtects usage of port 4501?  All I could find is the following:

• TCP/443 for the SSL communication
• UDP/4501 for tunne