Failed to save "PhoNATt". - NAT extension cannot be enabled for the device having support for nat policy.

We have ION 2K device and unable to enable the NAT policies in this device after upgrading it to 5.4.13 ION version. Getting the following error, I am not sure how to enable it but there might be an issue with stack configuration as of now it is defa

Free Cloud Identity Engine (CIE) training!

At Palo Alto Beacon there is a grat learning called "Identity at Palo Alto Networks" for this that can be checked.

https://beacon.paloaltonetworks.com/student/catalog

Also live community youtube channel has some usefull stuff:

https://www.youtu

Cloud Identity Engine for On-Premises Global Protect

Has anyone used the Cloud Identity Engine for authentication for an on-prem Global Protect portal/gateway?

I'm experimenting with the CIE. It works great for admin login to the GUI, but I'm trying to set it up as an auth source for GP. It is working j

Cloud Identity Engine

I am trying to get my Clould Identity Engine working on my firewall.  I got the CIE up and running and I am syncing my Directories with Okta.  But when I try to connect my CIE to the firewall via Device->User Identification->Cloud Identity Engine.  I

CIE Free?

Is ClE free or subscription based? 

Are there any limitation on how many groups it can sync?