Why would someone use "Next VR" for next hop?

When creating a static route on one virtual router. What would be an example of why you would choose "next vr"?

RDP with Gprotect time out

HI, We are establishing RDP sessions through Globalprotect. These RDP sessions are closed, we went into this link: https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/globalprotect-features/rdp-connection-to-a-remote-client We changed this value for "User Switch Tunnel Rename Timeout" to the maximum permitted (600 seconds),...

block keywords

Hello,I need a advice. We need to block any keywords for our users. Could you edvice how to do it?Thanks

What is the maximum character can filter text box can support in Palo Alto Panorama 7.1.6

Global Protect\MPLS redundancy

Currently I have an MPLS connection (Connected to a Palo Alto Firewall) at one of our branch offices in Shanghai. The problem is the MPLS connection (provided by Level3) goes down sometimes. I'd like to setup a Global Satellite connection on the PAN Firewall, with the idea being that if the MPLS goes down, we do not lose our connection to the of...

GlobalProtect and overlapping networks - is it a problem?

HelloI'm using GP since few years without any problem. Recently my colleagues complains abut situation when he can't established RDP connection. Local networks in their home is 192.168.1.x and my servers are on the same network 192.168.1.x -That's their issue.In my opinion it's not a problem because GP install virtual adapter that's have network...

PAN-OS 7.1 - SSL Decryption Issues

I recently upgraded from PAN-OS 7.0.6 to 7.1.0 on a lab PA-200 appliance to start to test some of the features. Right off the bat there seems to be an issue with SSL Decyrption. As I stated in another post, I'm having issues with sites such as banking establishments, google earth, bing maps, etc. where the browser (chrome, edge, and IE tested)...

Host name disappears

Running 7.0.6 on both panorama and firewall. Any reason why one device would all of a sudden lose its host name?

Wrong geo location for an IP

I have a set or rules that block access to some IP depending of their geo location. The problem is that an is is incorrectly geo located by the palo alto. IP is 91.194.60.7, located in France, and Palo Alto locate it in Ukraine !!! Is there a way to fix it on my side, or is there a way to ask a fix to palo team, as for URL category change ?