General Topics

GP client doesn't populate the gateway after installing

When users download the GP client from my portal and install it, the gateway field is blank. I've configured the gateway in the Globalprotect Portal>Agent Configuration>Gateways. Is there a way to have the gateway information pre-filled?

Timeout while waiting for response from agent.

Hi All, We are using kaseya for monitoring palo alto firewall it was working fine month back but suddenly it stopped and we are getting "Timeout while waiting for response from agent." for all the montors we set up for the anyboady know the solution for this? Regards, Kotresha

IPSec traffic being treated as "ciscovpn" applicatoin

Hi, Having an issue with IPSec tunnels. Sometimes (not all the time), phase 1 can't be established because IKE traffic is being treated as "ciscovpn" instead of ike and being discarded. Once I clear the session, the next session establishes correctly and works perfectly fine. Both sides of ipsec tunnel are terminated on Cisco routers. Is there a...

Resolved! Ageout

Hi all, I was able to ping external server from firewall and getting reply back from the server without any issues, however in firewall log it's showing aged out. Anybody know the reason behind this?why we are getting agedout after proper response from the external server?? Regards, Kotresha

Resolved! Override Loopback Interfaces pushed from Panorama

Hello, Is there a way to modify Loopback Interfaces in firewalls previously pushed from Panorama ? We cannot override it in the GUI with the override Button ? Tryed in 7.0.7 amd 7.1 Is this a supported Feature ?

Upgrading from 7.0.6 to 7.1.2

Hi, I need to upgrade from 7.0.6 to 7.1.2. The image base is 7.1.0 right?? i saw a lot of 7.0.1-bxxx, why?? any known bug or big change in this 7.1.2??? Thanks

Resolved! SSL decryption. What kind of the certificate l can use?

Hi Guys, Can you explain to me what types of the certificates l can use and where can l get them from? For SSL decryption, we do not want to use the self-signed cert. Thank you, Mykhaylo

Resolved! Facebook IOS App and Decryption

I have been testing decryption and different apps on our iPads. With decryption turned on we are not able to use different apps, for example Facebook. Now if I use a browser and go to Facebook, I am fine. Anybody do any testing with decrypting the iPad or iPhone traffic and getting Facebook to work? I am hoping that once I figure out how to ge...

hi i have a question about panorama

i am using panorama virtual appliance but hourly, daily, weekly no logs and no indexes i have updated threat, app, antivirus how to get logs ? please help me thank you!

How to add a device serial number to Panorama through the CLI?

I see how you can replace an existing serial number with a new one through the CLI but can find nothing on how to just add a new device serial number to Panorama through the CLI. Anyone done this before or have an idea?

PAN OS OVA not pingable from pc

I have .ova PAN 6.1, I imported to VMware, and I have another Guest PC in same VMware, both pan OS & PC have Network adapter connect to VMnet 1 (Host only), The PC have IP address 10.5.5.5, default GW: 10.5.5.250, and PAN Inside Interface 1/2: 10.5.5.250, but I can't ping from PC to Pan ova?Please need your help..

Resolved! wan interface configuration for HA active/passive

We are about to replace a single 2050 with an HA pair of 3050's. Having some trouble figuring out how to get the switch and Pa configured so I can share the single ISP connection with both firewalls. Current setup has interface 1/3 as L3 with the WAN ip address I was trying to minimize the changes to make (because 2050 is insanely slow to ...

Resolved! OS 7 change ticket system

I thought I read or heard of a FW change management part in the new OS's like 7.1 or 2 possibly. Can you confirm and provide some info on it? Thank you, Ted

Known Issues Lists

I wanted to start a quick discussion regarding Known Issues Lists, Release Notes, and documentation. Mainly, I want to pass on what we were told by our TAM (Technical Account Manager). In short:The way to find out the Known Issues for 3.1.8 is to read the Release Notes for 3.1.9. Whatever is listed as fixed in 3.1.9 was obviously broken in 3.1.8...

Resolved! syn-cookie

Hi, Where I can enable syn cookie . SYN Cookie is activated when the SYN flood attack threshold is exceeded ? Thanks

Discussions

GP client doesn't populate the gateway after installing

Timeout while waiting for response from agent.