Resolved! IPSec and Panorama with Satellite sites

Hello, 

I'm in the process of preparing two PA200s for our satelite sites. We are using Panorama to configure all of our firewalls and I'm trying to keep all my configs in the templates but am torn when it comes to the VPN configuration. 

My main co

Resolved! Grouping security policies

Hello Experts

Can  we group the security policies like all AD related rules in one group. This functionality is there in Juniper NSM and checkpoint. I am wondering how I can achieve this in PA. May be through tags?

Resolved! Naming convention for security policies and address objects/services

Hello Experts

Could anyone suggest the best way to name security policies as per their experience?

Regards,

GR

Resolved! Session Lookup for inter-virtual communication

Hello Experts

I was just wondering how firewall session is created for inter-vr communication. I have scenario like this:

Interface eth1/1 (Trust-VR) Trust Zone ---LAN (10.10.10.0/24)

Interface eth1/2 (Untrust-VR) Untrust Zone ---INTERNET

In Trust-VR,

Resolved! Asymmetric Routing and TCP syn check based on interface or zone?

Hello 

I have scenario like firewall is connected to two routers R1 and R2 through eth1/1 and eth1/2 interfaces respectively. From firewall, traffic is going through R1 via eth1/1 interface and return traffic is coming through R2 via eth1/2.

This is

Resolved! Dual ISP and returning traffic

Hi,

this is the scenario:

- ISP1 : only for GlobalProtect

-ISP2 : only for Internet access

ISP1 has distance 10 and metric 10

ISP2 has distance 10 and metric 15

in this scenario the ISP1 interface responds to Global protect gateway/portal no problem. A

Resolved! URL Test site - Down?

http://urlfiltering.paloaltonetworks.com/testASite.aspx
I am having issues getting to the test site.

Are the servers down?

Resolved! VPN SSL Two factor authentication

Hi,

i'm looking for a solution for VPN, that will support authentication in Active Directory and will support Two Factor authentication with OTP.

I read that GlobalProtect can provide me all features.

My questions:

is there any Palo Alto native VPN clien

Resolved! google not working with chrome update if unknown-udp is blocked

Hi,

chrome version 54.0.2840.59m if unknown-udp is blocked - google is not working

Any idea ?

Thanks