Help with inter-subnet routing

Looking for input on a subnet routing, issue I am having. 

So I have let’s say for argument I have two zones, Trust and Untrust. 

Interfaces

Int 1/1 - Untrust Internet 192.168.0.1

Int 1/2 - Trust 10.8.1.20

Int 1/3 - Trust 10.26.96.1

I have a vi

Help with network design

So my network consists of a PA200, a Juniper SRX, 2 servers, a VOIP phone, and a WAP. 

I recently configured the PA-200 with 3 subinterfaces for the 172.16.2.1/24, 172.16.3.1/24, and 172.16.4.1/24 networks. The Juniper port was configured with as a t

PBFand Default route

In our orginazation, we have dual ISP and PAN firewalls. We have configured PBF with ISP 1 and default route for ISP 2

Both ISP interfaces on Pan firewall is same zone called untrust

example :  ethernet 1/11 

                     ethernet 1/11.200 ---

How PA can replace a Proxy

Hi,

i search a easy way to see who is surfing on witch web site. where is it and how can i automatically write it to our file server oder any where else to?

So my dream is to put our proxy out of order.

the PA is connected to LDAP i can see a user but

Routing via a new internet connection

We currently route all internet traffic out through an internet connection connected to Ethernet1/4 on out firewall. I have another Internet connection that I'm going to connect to Ethernet1/6, and I want fraffic from one of my VLANs on site to route

Pan FWs running in AWS, auto scaling, load balancing etc.

I am looking at spinning up a set of PAN infra in AWS and I want to know if there are any landmines out there regarding the design and how it functions. Specifically, I want to use these instances as GP gateways and I want to be able to load balance

Global Protect Portal Feature Request

Am I posting this in the right place?

I would like the ability to display available VPN gateways for my users based on AD group membership.

E.G. I have 4 available gateways:

gw1 - no AD group requirements

gw2 - no AD group requirements

gw3 - no AD gro

Disble GlobalProtect Agent on internal - corporte lan

Hi,

is it possible to disable the globalprotect agent autoconnect on the corporate lan ?

scenario:

-outside the corporate lan the vpn connection must be autoconnecting to the globalprotect portal to enforce webfiltering etc..

- inside the corporate lan

"Facebook-apps" And "Facebook Chat" block

Hi all,

Appreciate if you can guide me to block facebook-apps and facebook-chat in Palo Alto but allow other facebook features. I already implemented it in Application layer but failed, is there something i am missed? I am using PA-3020 and 7.0.3 ve

Service route destination option

What is the purpose of adding destination in service route?

We have a default gateway in management interface config and we also have specific route in vr so why we need it?

NAT after Proxy

Hi

I have to set up a PA-200 as a NAT.  That it self would not be the problem but between the PA-200 and the modem is a Proxy. I have no information about that proxy. The only information i have about the network is the IP settings given by DHCP. Is