HA in VWire and path monitoring

We have an environment (HA active passive in VWire mode) in which the PA is sitting directly connected to an SRX FW in HA.

What we agreed that both of the PA and the SRX should be:

• Link up on the passive device
• Disable failover on link down
• Failove

CLI part 2

I have recieve some good information concerning CLI. But ever time I get online with a PA engineer they do a lot more than what is listed in the documentation I have recieved. So I am looking to see if there is a more comprehensive guid on troublesho

How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site

Hello All,

How to Configure Dual VPNs with Dual ISPs from a Active Active Cluster to a Remote Site? Any reference document?

We want to connect first ISP to device 0 on the active/active cluster and connect another ISP to device 1.

Is it possible to do a

Avoid scanning threat vulnerabilities

Hello

I have in my firewall logs events detected as a threat of this IP:

Source IP:    84.88.91.1    Spain

From Zone: Untrust

to my web server:

Destination IP:    195.77.XX.XX

Destination Port:    80

To Zone: DMZ

Multiple Vulnerabilities Types Targeting a Si

global protect and OTP

hey

our GP environment has PA device in cluster running both portal and gateway,

users authenticate to the portal using OTP and GW is also configured for OTP

we can see that users are authenticating and using GP well but when they put the computer into

How to restrict FTP and SFTP access using a security policy

Hi,

I have some users who need to connect to 5 ftp servers using filezilla (ftp and sftp). I want to restrict ftp and sftp access only to those 5 sites using a security policy.

Your advice is greatly appreciated.

Thank you.

Global Protect - ip address for portal web service restricts visitors by their ip address - WHY?

Hello,

We are a bit confused. It appears that our ip address setting under Network>GlobalProtect>Portals must be set to either an IP Range or IP/Subnet, therefore it is not necessarily a single ip address (which is what I thought it should be).

The par

Reporting discrepancy live v Report Group

I need some reporting advice or consolation that I'm not insane 

I have a report defined:

Clicking Run Now gives the desired results:

Clicking the Export PDF button gives the desired results:

However, the problem is the report is included in a Report Gr

Can I see throughput through snmp? Let me know throughput OID Value

Hello everyone.

Are there using throughput through snmp from customer?

I couldn't find that I looked around throughput OID Value..

Is anyone having PANGP connect/disconnect issues in Window8?

I am piloting the VPN solution for PAN.  So far everything looks good with Win7 but there are connect/disconnect issues with Win8.  I have made a support case and it looks to be a Win8 issue.  I need to know if anyone else has run into this issue and

Slow Palo Alto behaviour since upgrade

Since we update our Palo Ato2050 to 5.0.8 , we have detected that Palo ALto is working slowly

-Palo Alto needs a lot of time to show the logs and switch the tabs

-The interface web is very slow now

-Management CPU is always between 65-95% even with only