Block page for security policy matches

Is there a way to return a block page to users when their connection is blocked not by the URL-filter but by a security policy? We have a security policy that blocks all outbound traffic to a list of foreign countries. The problem is when users attempt to browse websites in these countries the traffic is blocked but the user doesn't receive any...

how to install PANOS in new HD

Hello Community, I have my PA2020 with issues. The device is booting from PanOS Bootloader. What is the proceess to upload and install again the PANOS?.

Is there any reason that tunnel interface will go down

Hi There, I configured two IPSEC VPN on PA, as PA has two ISP connectivity. Configured a PBF to forward the traffic through primary tunnel interface and enabled monitoring to monitor trust interface of remote PA. A route was configured to forward the traffic the traffic through secondary tunnel interface. I found that traffic was always forwarde...

multi-vpn

Is it possible to use a single install of globalprotects with multi vpn connections? I know you can set it up on a cisco vpn client but I don't see a way to do it on the GP client except for manualy changing the portal and lately that hasn't worked and say there is a cert mismatch, it seems to only want to read one cert

Change HDD in PaloAlto 5000 raid

Hi, We have a PA-5000 with 2 HDDs. One of them had an error and we asked for RMA. We have received 2 HDD for replacement.If the new HDD has the same part-number as the old HDD working , we wil only add a new HDD but if the model is different we have to add both new HDDs and delete the old ones- Please, what is the procedure to add both HDD in a ...

Disk Space problem on root

Dear All I'm facing issue with low disk space on root in my palo alto PA-3020. Please see below> show system files/opt/dpfs/var/cores/:total 4.0Kdrwxrwxrwx 2 root root 4.0K Mar 13 2016 crashinfo/opt/dpfs/var/cores/crashinfo:total 0/var/cores/:total 317Mdrwxrwxrwx 2 root root 4.0K Nov 27 08:15 crashinfo-rw-r--r-- 1 root root 19K Nov 27 08:30 l...

GlobalProtect Remote User VPN Connection Issues

Hi All, We deployed PA3020 firewall to our production. We have given vpn to client side and it working fine but the problem is they are no any disconnection button to disconnect from vpn client. Please advice meThanks.

VM PA to VM PC Unable to ping.

Hi, I've created a VM LAB. But, I facing some issue. VM Details: VMnet3: 10.128.1.0 (HOST) PA Details: int 1/1 10.128.1.254/24 mac: aaaaaaa1(sampleonly) PC: IP: 10.128.1.2DGW: 10.128.1.254 I already enable ping on Profile(PA). Disabled Firewall on PC but still can ping.Also on PA and PC can't resolve mac address/IP THanks

Cascading PBF policies for traffic fail over between two sites both using PAN firewalls?

My goal is to sent traffic to/from two sites with three levels of redundancy. Both sites have redundant PA-3020s. First, traffic goes through a L2 point-to-point circuit. If this fails and is disabled, an IPSec tunnel takes over. Lastly, a third IPSec tunnel takes over should the previous one fails. All interfaces and tunnels will be in the...

Issue with connecting to GlobalProtect

Hello, I've been using GlobalProtect before to connect to my univeristy's network when I'm outside campus. However, recetnly, I've not been able to conenct to the network. I get a message reading "Resend credential". I'm hoping someone could help me with that. Here is a screen shot of the message I get. Any help is appreciated.

difference between revert ti running configuration vs load named config snapshot