General Topics

Idea searched to block NAT-Router

Hi,

I have some clients who are installing a NAT-Router behind the Firewall to span their own WIFI. The NAT devices are from different vendors with different MACs.

Has anyone an idea how to detect these NAT-devices irrespective of their MAC / IP-adre

Ping identity with single sign-on, multiple users

Our support staff uses a single support portal login email and password to access our client's Palo Alto networks support.  We have attempted to log in and are getting notified we need to download PingID. How would this work with multiple people usin

Destination NAT vs Source NAT with Bi-directional option

Hi All,

In enterprise network, what are the usage scenarios for Destination NAT and Source NAT with Bi-directional option enable ?

Cheers

Harsha

External Dynamic List Limit

Ref: PA-5020

PAN-OS: 7.1.5

What are the limits for External Dynamic Lists?

• Number of Lists
• Number of Entries/List
• Are EDLs entries and lists counted in the total number for URL filtering? 

The documentation does not reference EDLs... https://www.paloalton

Disk space & OS upgrades

I regularly update the OS to the next recommended version every other month, and I was wondering if there was anything that has to be done  to clean up the hard drive so as not to run out of space?

Chromebook / Chromium - security rules prior to login - network not available

Hi All, 

I'm a newbie on the world of Palo but can't find a way around this issue "yet" so was hoping for some advice.

I have around 500 chrombooks and these are all tied into Google Directory services, they work fine etc etc. 

however i'm trying to

Got error while booting : NEW DISK CONFIGURATION REQUIRED

My PAN-5020 keep rebooting.

I had try ro factory reset, but it keep showing warning : NEW DISK CONFIGURATION REQUIRED, then rebooting.

Anyone can help me?

DNS aged-out, tcp-rst-from-client, and tcp-fin

I'm pretty new to Palo Alto products, and I just inherited one.  I was having some small issues getting to a site (just a minute or two delay).  When I went to the Monitor tab, and saw something that looked a little strange, but could be completely n

SLR Report /AVR Report

Hello,

after i geneate a "Stats Dump File" where i can upload this file to get the report?

I cant find any tool or link do upload the file.

Thanks

Floating ip on a single firewall?

Hi all,

Here's a network design issue we have run into.  Our network consists of a single 5050 that services two core switch routers.  Each core has a single connection from itself to the 5050. They are OSPF routed interfaces.  Users can traverse eith

Alternative for Checkpoint capsule

Hello, as security engineer i'm visiting many potential customers and some of them are Checkpoint oriented ones. The main obstacle to migrate to PaloAlto is in many cases - funcionality called Capsule - where employees can connect choosen service via