Response Page for virus (e.g. Eicar test) when using SSL inspection

As the title suggests, I'm getting to grips with SSL decryption (which is working fine). We use a response pages for a virus notices and I'm testing the eicar site (Download ° EICAR - European Expert Group for IT-Security). Over HTTPS the 'virus' is

Client VPN traffic and routing over IPsec Tunnel

Hi there,

Here is our scenario that I am trying to figure out.

We have two sites (main office and a rack in a data center) that are connected via PAN-2020's on both sides through a IPsec Tunnel. I am trying to route Client VPN traffic that connects at

PA-200 Multiple WANs

Hi,

I'm getting my second WAN line installed this week and need to integrate it into my current setup on my PA-200.

Ideally, I'd like the PA-200 to load balance between the two WAN interfaces so my initial thought is to add the new WAN interface into t

NAT Help - Reaching DMZ Server via NAT

Hi,

I'm having an issue setting up my DMZ test environment.  My set up is basic and is as follows (IP information is an example) --

• e1/1 - Internet (1.1.1.160/28 - ISP assigned)
• e1/2 - Internal (10.10.10.0/24)
• e1/3 - DMZ (10.10.100.0/24)
• DMZ Web Server (I

L2 trunk and subinterfaces to Cisco

I am trying to configure a L2 trunk from a Cisco 3750 to a Palo 5020

I cannot find any info on how to configure the Palo, as the terminology is different to me.

As a side note we are also running two 5020's in an Active/Active configuration

I have tried

one trust two untrust

If I have two DSL connections, and 10 network segments, is possible configure on a PAN firewall one "trust" zone, tow "untrust" zone and send five segments for each one?

IPSEC Pass Through

Forgive the newbie question, but I've been searching the documentation and I don't see where I can configure the Paloalto FW for vpn passthrough, specifically ESP (Protocol 50) and even ICMP.  I have some routers that I need to provide NAT for their

Problem with new internet connection

I've just changed my internet connection to a new one.

Now I've reconfigured everything with the new address.

The issue is that I can surf the web from inside to outside but the NAT to my internal server is someway blocked.

What I can see in logs is:

I r

LDAP and GlobalProtect

Hi,

I am trying to set up Globalprotect.

Would like to restrict the user to a group, but I can not get this to work.

In Authentication profile i have the VPN-group in allow list.

When I logon with a user in this group the log tell me that i have incorrec

BGP config PAN-OS 5

Hello,

I was working on a BGP configuration on a PA 500 running PAN-OS 5. It is an internet connection plugged directly into the firewall. (Its an ethernet hand-off). I couldn't find any docs for v5 so I just hacked my way through it. Is there any ste

Is DHCP-Relay ready for GlobalProtect GW yet?

Last discussion on this topic was in 2010.  Is there any update on DHCP-Relay (IP helper by any other name) binding to GlobalProtect clients?