Clarification Needed on Multiple Static NAT Rules with the Same Public IP Address

Hi Community,

I’m working with a customer who had previously configured a dynamic IP source NAT rule with only one address in the pool. This setup worked as expected for just one PBX since after the first session, the public IP would be in use, limit

questions while creating first IPsec tunnel

We have our egress on Eth1/1 with a public IP assigned by our provider.
We also own a separate public subnet.
We have the internet working and want to add an IPsec tunnel from our PAN to a partner also running PAN.
I'm told to continue using the Eth1

Split Tunnel - Exclude Client Application

Hello,

I am setting up a new Global Protect gateway.

We previously havent setup Global Protect (GP) before with Split tunnel so this is my first time and its not going smoothly..

i am trying to exclude client applications for some software we use. bei

HA State is "not sycned" even though Sync Task is completed on Peer (Passive) Gerät)

Hello,

There are a few config differences between Active/Passive Firewalls like (asssigned Auth. Profil under Device section, login banner, snmp features)

When i perform sync it shows on Task Manager of Passive Firewall it is succesfully synched. 

How

How to limit concurrent GlobalProtect connections per user

Hi communit

So far it isn't possible to limit the concurrent GlobalProtect connections per user directly in PAN-OS. There is a feature request #4603 for which you can vote and wait/hope that this will be implemented.

If you need a solution (worka

Find more info about process based on PID

The command 'show system resources' lists the active processes and their PIDs and their resource utilization, but is there another command where based on the PID I can get more info about a specific process ? 

Similar to show jobs all shows all the jo

split tunnel

Hi Team,

We are using global protectect and using split tunnel where all LAN traffic gose through global protect and internet traffic through their own ISP

Is it possible to route specific traffic, such as access to https://ab.xyz.com/something/#, th

DHCP Relay

PC1 in DMZ Zone cannot receive IP from DHCP Server. I already allowed DHCP Traffic in firewall and also configure DHCP Relay which is ethernet1/4 interface with dhcp server ip 192.168.10.1 

NOTE: i have configured vlan: 192.168.10.0/24 

Boot PXE Fog

Hello everyone,

I have a little problem with my boot PXE with Fog server

My station boot on port 69 at the gateway of his network

Fog server and the station they are not in the same network.

I tried to use DNSMASQ but that not resolve the problem

XDR CLEANER 8.5.* STUCK not working

XDR CLEANER not working stuck have tried rebooting system also not working any other way to remove XDR other than cleaner, removing from appwiz.cpl

log rotation alarm in the Panorama?

Hello community!

The firewalls generate an alarm when certain % of the log quota is reached:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClktCAC

In Panorama you don´t have those alarms. In a Panorama-VM Logs are purg

Delete logs in /opt/panlogs can select specific date?

Hi All,

i have question on this KB : How to Clear Logs To Reduce Disk Space usage on /opt/panlogs - Knowledge Base - Palo Alto Networks

can we chose to delete the logs by specific date? 

if there any command or KB to do it, can do please share.

logdb quota question

Hi ,

in show system logdb-quota as per screenshot

i found something weird information

As you can see, the system log is have max allocated 12.91GB, but why actual disk usage for system logs can be reach 61GB ?

Can anyone know and explain abou