REST Question

I'm trying to setup a script that will clear the VPN ike-sa and ipsec-sa connections for a particular tunnel. Does anybody know what I need to actually select the name of the connection. It currently looks like below

<clear><vpn><ike-sa><gateway></ga

IPSEC VPN certificate authentication with windows 7 firewall

Hello, guys !

We are trying to configure scheme like this:

One PaloAlto as VPN hub connected to the internet and couple of windows 7 PC witch Windows Firewall IPSEC policy configured.

We are using certificate authentication and trying to use "wildcard"

Site to site with netgear V7610 Telstra gateway.

Has anyone configured site to site between PA200 and V7610 netgear box which Telstra provides.

Can it be done ,any issues ????

Different DHCP Subnets on same Interface

Hello everyone,

one of my customer has the following specific requirement.

PA500 version 7.1.0

Inside Interface IP: 10.0.1.1/24

Firewall should act as DHCP Server and assign IP Addresses in the following Scopes only via inside interface.

Scope: LAN De

Two Subnets For Two Group Of People

Hi,

Can one help me how to configure two groups of people that use GP as a VPN client?

let say I have user 1-5 needs to access my inside firewall with subnet 192.168.1.0/24

and I have users 6-10 needs to access my inside and couple of the IPsec tunnel t

PAN-DB cloud list loading failed

I've been getting alerts from all my PAN firewalls starting last night at 8:51pm EDT that they can't connect to the PAN cloud to update the PAN-DB URL database.

Anyone else seeing the same or a similar issue?

Issue when loading from AWS Marketplace Palo Alto VM-Series

Hi,

When loading the AMI from AWS Marketplace, I get the following error when the machine tries to boot:

Enter 'maint' for boot menu.

Booting PANOS (sysroot0) after 5 seconds...

Booting 'PANOS (sysroot0)' root (hd0,1) Filesystem type is ext2fs, partiti

Allow a single URL in a URL filtering policy

Good morning All,

I have been playing with PA frewalls for a while now but can't seem to find and answer on this.

Is it possible to block all URLS in the block list and then have an allow for one or two allowed URLs (for a public use computer)

I was

LDAP servers for fault tolerance only?

Dear community,

I am struggling around with a though I cant find an answer for. I every documentation I found they state that additional LDAP server are for fault tollerance only. Imagine the follwing setup:

A customer is loadbalancing user authentic

Upgrade to 7.1.4 OS , Any specific issue

We are Planning to upgrade our firewall from 6.1.10 to 7.1.4 , has anyone faced any specific issue with 7.1.4 ?

Thanks in Advance.

Session timeout

Hi,

From reading this article below:

Connection Timeout Even When Heartbeat Packet Sent

https://live.paloaltonetworks.com/t5/Management-Articles/Connection-Timeout-Even-When-Heartbeat-Packet-Sent/ta-p/61435

It says "The session timeout is set to 60 mi