VPN Tunnel down - Troubleshoot

Hi Admins,

I need some help to troubleshoot our problem with the VPN Tunnels. We installed a Cisco to PaloAlto VPN tunnel. The PA in passive mode. But constantly the tunnels go down.

Here are some log outputs:

less mp-log ikemgr.log

2014-04-23 09:21:54

applipedia categories

Sorry if this doesn't belong in this location.

I see in the applipedia that the applictions have a description.  Does such a description or definition excist for the categories and more specifically the subcategories?  For example, what is the differ

Query regarding Dual ISP through 2 VPNs

Hello,

Any stable release of 7.1 yet?

We recently purchased AutoFocus and I know for the firewalls themselves, it needs 7.1.x for a lot of the integration.  Are there any recommened versions of 7.1 yet?  I know 7.1.4-h2 was recently released.    We mainly have PA-500s with a few 3020s an

Video - MineMeld on AWS & Autofocus Export Lists

Here you can find a video about using MineMeld on AWS and how to configure it for collecting Autofocus Export Lists:

https://paloaltonetworks.box.com/s/1opgnziic7kxqx5y83q5gsusbf5yo989

Threat signatures requiring ssl decryption

Is there a way to determine if a threat signature requires ssl decrypt in order to provide protection. I undertsnad this could have at least three posibilities being fully required, partially required, and not required. Using signature 14616 in conte

PA v200 SSL offload

Hi, Please can someone confirm that if PA v200 virtual Palo Alto firewall can do the following? 1- Off load SSL request from customer (HTTPS) 2- Inspect the packet 3- Re-encrypt it and forward to next hop in secure (https) format Regards,

Blocking Web Advertising with PANDB and websites that check for blocking

Hello,

For several years, we have been blocking URL content classifed as "web-advertisements" within PANDB.  This has been extremely successful in stopping malicious ads from comprimising systems. 

More and more websites are now disallowing access to

Using Dynamic Block List - What happens if the Dynamic Block URL is not available?

What happens if the URL for the dynamic block list is not available? Are the entries cached or all IPs allowed?

Thank you.

Embedded Word Templates - Clients on external networks to reject immediately

Hi Guys

Wondering if anyone has any ideas on;

There are external clients / users attempting to open word documents that use word templates stored on the corporate network drive.  When the user is offsite and not connected to Global Protect or VPN and