User-ID IP mapping

Why does some traffic in the logs not have a user tied to the IP address at times even tho in the logs the IP has a user mapped to it most of the time.  This is causing policy to be dropped down to a different level.

Login problem - old user, new laptop and a confused administrator

PAN-200

Version: 6.0.1

GP Agent: 2.0.4

Having a problem with a laptop (Windows 8.1)  and authenticated using certificates and active directory.  Palo Alto and network newbie.  New to Windows .. I've been a linux admin for so very long. Help ...

So .. we

Issue with static routes.

I look after a PA2050 running OS 4.1.8

I am trying to setup 2 new static routes in my virtual router but they are not being picked up when I do a show routing route or show routing fib after a commit.

One of the routes is a new one and the other is a r

Using FQDNs pointing to a CNAME instead of A Record does not work

My PA can not resolve FQDNs pointing to a CNAME.

This is dangerous, if you are using FQDN instead of IPs in policies. They can stop working.

We configured a FQDN hostname host.mydomain.de and bound it to a policy.

Few months later moved this Service to

PAN in Layer 2 mode and Microsoft NLB

Hi!

Customer configured Palo firewall to work in Layer 2 mode to protect VLAN. In that VLAN there are two servers in MS NLB configuration. In VLAN configuration in Palo, static MAC entry is configured for virtual MAC address, but that entry isn't disp

SSL Decryption

Hello,

We have quite a few students using hotspot shield and other tunneling apps to get around our filter. I've been successful in block a majority of them by blocking the hotspot shield app. However there are still a number of them getting though by

Certificate Bundle

Hi,

I'm get error on commit: "Warning: cannot find complete cerficate chain for certificate Certificate_Bundle"

I notice there are three bundles in the device certificates, but how do I know which bundle is being used?

How to I test this without breakin

How to read SNMP Values from VPN-Tunnel-Interfaces?

Is it very easy to read SNNP Values from physical interfaces:

Connect the SNMP Browser to the PA

Set the right Community password:

PA shows you the interfaces - but only the physical IFs.

How to read SNMP Values from VPN-Tunnel-Interfaces?

Roman

See: Palo

HA failover when 1 port loses conectivity

Looking for ways to setup a PA5020 pair for HA that takes into account if the link to one interface goes down the system fail over.  I have hear of possibilities of using a "HEARTBEAT" up the link to cause the failover when it fails.