Global Protect Troubleshooting

I have a portal and 3 gateway's setup.  From my home network and a couple other home networks Global Protect works with no issues,  We can disable the client, re enable it, change to different gateways on the fly and it connects right up.

Now for some

Upgrade to 5.0.14-h3 stopped traffic

We just attempted to upgrade some 5020's to 5.0.14-h3(mainly to patch the evasion vulnerability) and quickly found that the upgrade broke traffic traversing the firewall.  During the short period of time it we were running on 5.0.14-h3, there were a

Netflix application rolled in to web-browsing?

Last week I ran an ACC report for the top 25 applications.  Netflix was #3 (university environment, so it's to be expected).  Today, I ran the same report and Netflix (as an application) is no where to be found.  I launched Netflix on my computer to

User-ID IP mapping

Why does some traffic in the logs not have a user tied to the IP address at times even tho in the logs the IP has a user mapped to it most of the time.  This is causing policy to be dropped down to a different level.

Login problem - old user, new laptop and a confused administrator

PAN-200

Version: 6.0.1

GP Agent: 2.0.4

Having a problem with a laptop (Windows 8.1)  and authenticated using certificates and active directory.  Palo Alto and network newbie.  New to Windows .. I've been a linux admin for so very long. Help ...

So .. we

Issue with static routes.

I look after a PA2050 running OS 4.1.8

I am trying to setup 2 new static routes in my virtual router but they are not being picked up when I do a show routing route or show routing fib after a commit.

One of the routes is a new one and the other is a r

Using FQDNs pointing to a CNAME instead of A Record does not work

My PA can not resolve FQDNs pointing to a CNAME.

This is dangerous, if you are using FQDN instead of IPs in policies. They can stop working.

We configured a FQDN hostname host.mydomain.de and bound it to a policy.

Few months later moved this Service to

PAN in Layer 2 mode and Microsoft NLB

Hi!

Customer configured Palo firewall to work in Layer 2 mode to protect VLAN. In that VLAN there are two servers in MS NLB configuration. In VLAN configuration in Palo, static MAC entry is configured for virtual MAC address, but that entry isn't disp

SSL Decryption

Hello,

We have quite a few students using hotspot shield and other tunneling apps to get around our filter. I've been successful in block a majority of them by blocking the hotspot shield app. However there are still a number of them getting though by