Ipsec VPN issue with checkpoint

Hi Friends,

We have an IPsec VPN tunnel configured with  CheckPoint firewall.

Basically, when our Phase 1 expires after 24 hours, if a Phase 2 key is still within its 1 hour lifetime, we receive no response back.

Only after the Phase 2 k

Problem of Authenticating users on Cisco WLC integrated with Palo alto

dear all,

we have integrated our Cisco Wireless Controller with Palo alto Firewall, the problem is that some people, authenticated successfully on the network, but the username still not appeares on Palo alto, although i can found them on the WLC, th

How to use Panorama to deploy standardized remote sites?

I'm looking for a way to use Panorama to deploy about 100 remote sites.

Let's say that we have the following scenario:

Site 01 has local subnet 192.168.101.0/24

Site 02 has local subnet 192.168.102.0/24

Etc through site 99 has local subnet 192.168.199.0/

SNMP OID´s and descriptions - PA-3050

I need the SNMP OIDs with descriptions for the PA-3050

software version: 6.1.4

Do you help me ?

tks

Paulo Aun

DHCP not passing thru the 500 in wire mode

I am using a pa-500 as just a web proxy, I have clients sitting in different vlans connected to a ASA5512 that is acting as the router/FW and has DHCP Relay setup and was working fine.  I added the PA500 between the ASA and the other network as a web

BGP setup - "max prefixes" question

We have a pair of 7050s that are Internet-connected via three ISPs. The ISPs are sending a limited set of routes (essentially the IP space they "own) down to our border routers. We want to replace the static default route we're using with BGP between

Cisco Wireless Networks, ACS, Syslog-Senders, and AD Groups !

Hi,

I've worked out how to recover the User ID, or UID, from a wireless network logon by sending syslog messages from the Cisco Access Control Server, or ACS, to a syslog-sender configured on my firewall.

For wired connections I can recover UID and AD

How to configure a pa-500 with 2 inputs

I have a PA-500 running as a web proxy, The connection from the inside is a ASA-5512 (required), except that I have 2 5512's running in active-standby failover mode. How do I connect both 5512's into the PA500 so that if a failover happens the traffi

Zone Configuration

Firstly, apologies if there is already a thread on this.

I have a pair of PA5020's running in HA mode with PAN-OS 6.0.5-h3

When trying to create new interfaces I get the following errors

Interface X has no zone configuration.

Interface Y has no zone co

Panorama 6.0.4 and PA-200 6.1.0

Seems like the PA-200 will not connect to Panorama after software Update to 6.1.0

Just wanted to check if this is the case. (Panorama needs to be at least 6.1.0 to get the PA with 6.1.0 connected, or if i have an other issue)

thanks,

Kai