vpn s2s with Mikrotik router - proxy id problem

Hello

I'm trying to connect PaloAlto PA200 PANOS 6.1.6 and Mikrotik RB951 6.32.2

Phase 1 is estabilished properly but I cant get phase 2 working.

Logs from Mikrotik says:

Sep/22/2015 20:09:34 ipsec,debug,packet HASH computed:
Sep/22/2015 20:09:34 ipsec,de

PA-2020 in HA commit are just a nightmare

Dear Community,

Is there a official way to improve the commit on those models ?

It could take more than 15 minutes sometime, it really hard to work with those appliance.

the upgrade for 3030 appliance is insane too, about 40 000 € with 3 years support

Can you create two virtual firewalls inside one physical PA-200?

I am wondering if you can create two virtual firewalls inside one physical PA-200 box?

If this is possible I would like two physical ports to be allocated to each virtual firewall.  One virtual firewall and its set of ports will be for a production ne

Logs related to load old configuration from Panorama

Hi all,

From Panorama web interface, if I load an old committed configuration into a managed device (I mean from Panorama->Managed devices-> Backups tag), where I can see the logs related to these operations?

In the local configuration system logs I c

I want to know some details about a specific threat signature.

Hello everyone

I have this threat signature.: "NUCLEAR Exploit Detection Kit (38268)" , and I'm researching on what date was it created?

I need to know which version of the threats database was included and released this signature?

I would greatly app

Historical report on QoS

Hi All,

What methods are people using to show history reports for QoS?

Are these metrics held in file/memory etc, so that they can be feed out via syslog etc into a system, so that a historical view can

be created of QoS information?

I'd like to build th

PANOS 7 on PA-2020 ?

Will it work ?

I don't mean like is it compatible.

I mean: Will it be manageable at all, seeing that version 6 is already a management nightmare ?

Is anyone on PA-2020/2050 on version 7 and what are the experiences ?

I see some changes that may be usef

Globalprotect still cant report missing patches on MAC OS?

The last version that didn't have this "known issue" was 2.2.0, based on release notes. Even the most recent release, 2.3.1, has bug id 77018 and wont report missing patches on the mac. Any idea when Palo will resolve this? It seems to severely limit

Device Capacity Planning

I am trying to get my head around device throughput maximums. As an example the 3020 is speced as such:

• 2 Gbps firewall throughput
  (App-ID enabled1)
• 1 Gbps threat prevention throughput
• 500 Mbps IPSec VPN throughput

Are these throughputs simultaneous? In o