General Topics

third party VPN clients with PanOS 7.0.3

I was curious if anybody else has seen this issue, or could perhaps try to duplicate it.

I have a problem with third party VPN clients after upgrading from PanOS 6.1.6 to 7.0.3 on our PA-3020s.  Specifically, the built-in IPSec VPN client on Mac OS

SSL Decrypt

Hi

We have a guest wifi that availave to all and sundry to be used by using their own equipment. We would like use SSL Decryption on this.

The main issues is that for guest device we have no control over this to be able to install the CA cert ont

Can I choose what categorizes I choose for allowing SSL-Opt Out Pages?

Hello All,

I am after some help with SSL decryption?

We currently want to decrypt ALL SSL traffic.  However moving forward there are 3 catorgies we wish to bypass SSL decyption for BUT only with the use of the opt-out pages not a blanket SSL cato

we're starting to get "WildFire Public Cloud channel registration received invalid cloud info"

SYSTEM ALERT : high : WildFire Public Cloud channel registration received invalid cloud info"

errors all of a sudden. No change on our side.

varrcvr.log only reports

2015-11-24 08:25:24.386 -0500 Error:  pan_fbd_fwd_report_process(pan_fbd_fwd.c:40

Import named configuration snapshot failure

I'm trying to import my production Panorama VM configuration into my lab Panorama VM and I am getting the following message, and I'm not entirely sure what it means:

upload -> config -> content Node can be at most 41943060 characters - current leng

Global Protect Failed to open sub key

Hello All,

i have problem with my GP. I configured it and for 99% users work fine. But a few has communicate "resend credential" and stuck. 

In log file PanGPA.log i have:

How to test AV Functionality when Eicar not in signatures?

How to test AV Functionality when Eicar is not recognized by the Firewall? 

Roman

McAfee Evader - did You use it?

Hello

I'm courius that someone is using it for testing PA device? What was the resoults?

You can download this tool from http://evader.mcafee.com/

Do You know other tools like this?

With regards

Slawek

Online PA training

Can anyone suggest some good online PA training?

Global Protect DHCP Options

I have a PA-500. I have a basic configuration for Global Protect up and working - certificates, agent settings, etc. All is well. The client can route to internal resources as expected.

Now, the next step I need to take for these VPN clients in trans

OpenVPN behind PaloAlto

Hi!

We can't get OpenVPN to work. Our Juniper-SA works well.

The setup is only working without Firewall:

Laptop (static IP 80.0.0.4) attachted to an switch and the OpenVPN server attached to the same switch (eth1, dmz)

Our Policies:

Monito