Is it possible to configure dynamic load balancing using Routing protocols for below shown topology?

Hi All,

Is it possible to configure dynamic load balancing using Routing protocols which are supported by PaloAlto?

Requirement :  We have total 16 MB line ( 8 MB from Aircel ISP and 8 MB rom TATA ISP ). We are looking to balance the load on both isp

IPSec VPN issue

Hi All,

We have configured IPSec VPN between PAN and AWS. 

When i iniate the tunnel, IPSec and IKE SA installed successfully as a initiator.

then, IKE protocol IPSec SA delete message sent to peer. SPI:0x...

After a second, IPSec key deleted. Del

HA Upgrade

I found this link on the knowledge base

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Upgrade-a-High-Availability-HA-Pair/ta-p/57081

Has anyone used this method or any other method that they would like to share. I am currently at 6.

How to trigger a message when a particular DENY rule was hit?

Hello,

is it possible to trigger a message (whatever), when user hit a deny rule?

Roman

Getting .merged-running-config.xml from a version 7.0.2 firewall?

After upgrading a Panorama-managed firewall from 6.1.x to 7.0.2, a generated techsupport file no longer contains the .merged-running-config.xml as described in doc-7904.   I need to obtain the merged configuration from a firewall managed by Panorama,

SSL Decryption Woes

Hi,

I am not able to get to https://platinum.netnames.com/ with SSL decryption on, on PAN 7.0.1 / PA-3020 (IE11 / FF40 == TLS failure). Also, speed seems capped to 3Mbit/s with some CDNs (S3 AWS). Am I missing something?

thanks.

Nested groups problem

Hello all,

3 domain and single forest.

(root domain)  named as domainA and domainB and domainC

we created 3 LDAP profile for each domain.

we can see members from all domains.

we can see groups for each domain also.

But problem is, if we create a group n

TCP Echo Service on an interface

Hi all,

Is it possible to get an interface to respond to the TCP Echo Service on Port 7 via a management profile or some other way?

I don't mean a ICMP echo request (Ping) but what's described here

https://en.wikipedia.org/wiki/Echo_Protocol

ht

brightcloud active option unavailable

Hi,

     We couldn't activate brightcloud url filtering with our old database.

I have attached the screenshot for you reference, kindly look into it and help.

with regards,

Ram

vpn s2s with Mikrotik router - proxy id problem

Hello

I'm trying to connect PaloAlto PA200 PANOS 6.1.6 and Mikrotik RB951 6.32.2

Phase 1 is estabilished properly but I cant get phase 2 working.

Logs from Mikrotik says:

Sep/22/2015 20:09:34 ipsec,debug,packet HASH computed:
Sep/22/2015 20:09:34 ipsec,de