Floating IP and ARP load sharing addresses binding in A/A

Hello All,

I'm curious about spending public IP pool given by my ISP, if I decide to put PAN-s in front edge perimeter. I have seen that in A/A scenario I need 4 IP's (physical and virtual) for Floating IP scenario, or 3 for ARP load sharing (2 physic

Aggregate logs on PA-7050 across NPCs?

Hi,

I'm trying to aggregate logs across all dps in the system – right now only 2x NPC.

Using the procedure here: https://live.paloaltonetworks.com/docs/DOC-3876, the firewall says "packet-diag.log is aggregated” but where is it? Does that aggregated lo

Aruba ClearPass and User-ID

We use 802.1X on our network for user authentication and assigning VLANs dynamically. Our edge switches (Brocade) and Aruba Controller are configured to use Aruba ClearPass to authenticate each user. ClearPass uses LDAP (freeIPA) to look up users. Cl

SHA256 forward decryption on Palo Alto Networks Firewall PanOS 5.0.15

I have a private subordinate CA signed using sha256.  This is my forward decryption certificate.  The trust anchor is also sha256.

With forward decryption enabled on my PanOS5.0.15 device, the certificates generated by the firewall are signed using sh

Panorama and Active/Active Setup

I'm setting up two 7050's in an active/active configuration. What is the best method to handle this with Panorama? Right now I only have one of them in there and it seems like only one of the nodes is getting my config changes even though I have conf

Global Protect Problems on a Mac

Running Global Protect version 2.1.0-50 on a Macbook Pro with OS X and Yosemite. Connecting to a PA-500 running PANOS 4.1.8.

When I finish using my Mac for the day, I put it in Sleep mode so that it starts up again instantly. But if the VPN through Gl

allow single url

Hi,

on URL-filtering how can I allow a single URL (i.e. docs.google.com) and block all the others ?

Thanks.

Identifying unknown-tcp in Monitor tab

Hello,

We have a PA-3020 running 6.0.3.  Basically we have iSCSI replication set up between two sites.  When I pull up the traffic in the Monitor tab I see the picture below.  Even though iSCSI traffic is defined in the Applications section I tried cr

What on base are showed for "show all signatures" of exception menu in vulnerability?

Hello,

I have a question.

What on base are showed  for "show all signatures" of  exception menu in vulnerability?

I knew installed threat version in FW show.

But I guest it is not fact. Look at the following images.

The above FW does not have threat signa