General Topics

DirectPath I/O

I currently have a marathon support case open and support's latest reply includes an internal-only link (I'm pretty sure), so I can't read it. 

The release notes for 7.0 specify: 

"High Availability (HA) Link Monitoring is only supported on VMware E

Global protect and HIP profiles problem

Hi,

Lately I´ve been having issues with clients connecting to Global Protect. They pass the HIP match (no warning message is shown when they connect) but still the security policys with the HIP profile doesn´t apply, instead they hit a deny policy. A

VWire and Oracle Database Traffic - Devs are complaining that its slow - Palo Alto 6.1.6

I was wondering if anyone in the community had any experience with implementing Oracle databases and Palo Alto in a VWire environment.

Over the weekend we implemented a pair of Active/Active 5060's between the our data center and core.  Every other a

SSL Decryption, ¿hardware or software?

Hi, anybody knows if PA3020 and PA3050 has a dedicated hardware for SSL Decryption?. I saw a document a few years ago where you can see that some Palo Altos has a dedicated chip for SSL decryption but I could not find it again and I do not see if PA3

Can we use HIP check for LAN users ?

Hi Team,

Can we enable HIP check for LAN users? if yes, is it is limited to allowed Global protect client on each model?

Regards,

Guru

Palo Alto Physical Connections in HA - Best Practice

Hi Team,

I am after some guidance on how to deploy a pair of PA3020's using vwire. Upstream connects to ASA in L3 mode and downstream connects to Nexus5K.

Some one told me to plug in PA01 to ASA01 and PA02 to ASA02, likewise for N5K's. Is this the bes

BGP Peering Issue

I have a PA connected to my upstream provider exactly how it is with the same provider at two other locations, but I cannot for the life of me get BGP to establish. I've got a case open, but they're being hilarious slow and only responding with canne

PAN-DB Re-Categorization Requests

Just curious what everyone's expereince / success has been when trying to get URLs re-categorized, especially malicious domains?

I don't seem to have much luck instilling a sense of urgency with support on these requests.

I submitted a support case f

SSL inbound inspection question

Hello,
I have PAN OS 6.0.10, I need to implement SSL inbound inspection, for my web server, but I have multiple SSL certificate for same public ip address. When I try to commit configuration, the commit failed.

I think PAN support only one Decryption