If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users.
In the past six
...
Hi all!
I have a new policy that I pushed yesterday that was a total failure and any help you can offer would be appreciated.
We have a policy that looks like this:
Source <Internal IP addresses>
Destination <Negate Region US>
Application <unknown-tcp, un
...
Hi all,
I am using Panorama 5.0.4. I have two device groups and let's say two administrators.
Is it possible to grant Admin A RW permissions to Device Group A and RO to device Group B, using the same login?
How can this be achieved?
Any help would be app
...
I have configured a VPN portal and a gateway, both of them with an authentication profile that it's based on just an allow list (no authentication by RADIUS or anything else). The user is obtained from the common-name field of the user certificate th
...
There some problems with connection user to Juniper SRX through PA-2050.
The exercise is to make L2 connection between Wifi user to Juniper SRX through Palo Alto.
Please give some advice to make this configuration in Palo Alto.
I have no many experience
...
Hello guys.
I have a question about IPSEC VPN tunnel and is IPSEC VPN can use PBF instead of routing or not.
I think that tunnel interface could have ip-address (for tunnel monitoring) so I guess IPSEC VPN tunnel could use PBF instead of routing?!
So I
...
Hi, all,
As title, I want to let the browser redirect to a specific URL after user authenticates from CP successfully.
How can I do it ? by Java Script ? or no way to do it ?
Thanks,
Sample Wu
I'm having a discussion with my firewall engineer about rules in the PA5020. If I define an application to be used, say SSL, and I want to run that on a random port, say 8443. When I define that port (service) 8443 and choose the Application 'ssl',
...
Is there such a list? It is a pain to have to review the incremental documents for each version, while not knowing which version a particular issue may have been addressed in.
Hello. I am working on the initial configuration of our new palo alto's. These are not in production yet. These new firewalls will be taking over our vlan's (will be the gateway) and will be running OSPF. I will stop the ospf instance on the local ro
...
Hello
We are using RSA for user authentication with Global Protect.
We need to identify the LDAP group (Windows Active Directory) the user belongs to, but It doesn't work.
The reason is that the user we use for authentication doesn't include the domain
...
Hi,
For a PCI client, we are looking to get a (very) strong auth for a VPN connection with GlobalProtect, using certificate.
We use Safenet eToken for the repository of the cert (which is CAPI compliant on windows).
We want to use only cert generated by
...
Regarding SSL Decryption:
I originally put the whole category of "social-networking" under a Decrypt rule (mainly to decrypt Facebook to block Facebook games). However, when I tested on my iPhone after that, LinkedIn, Twitter and Facebook all had "ne
...
Hi
Currently we have a beta-environment for GlobalProtect-VPN on Windows7 (64bit).
Authentication with LDAP works fine.
But we want to use a client-certificate (user) from our internal Windows-PKI which is already rolled out to the endpoints.
Where can i
...
Hi,
Since application version 370 released, I have some trouble with openvpn :
Openvpn udp on port 443 didn't work anymore
Openvpn udp on port 1194 works
Maybe there is a bug on the new application version. Openvpn not on the default port didn't be recon
...
We have a branch in a different state to which we have a DS3 MPLS circuit. We and our branch office have there own ISP connections for Internet access. I would like to have redundancy build between both of our companies through IPSec VPN tunnel in t
...
on:
Upload and Download QoS
on:
Mute the Music while on Hold
