GlobalProtect support for OSX 10.9

Anyone got GP to work with OSX 10.9?   Do we need to wait for an update?

Thanks,

E

HTTP Report

Hi,

I want to create a report based on the predifined canned report HTTP Applications.  I have tried loading it as a template and it doesn't show up in the list of templates.  I have also found it in the CLI as top-http-applications the output of whic

Torrent

Hello Guys,

Have anyone of you noticed something regarding torrent(bittorrent, transmission..etc..)?

We received a report that a torrent app which is transmission is able to evade the app detection of Palo Alto NGFW.

I tested it in my lab, I use Bittorr

TCP Sliding Window checks stops after L7 scan is completed for a session

Hello,

Does anyone have a document confirming  the expected behavior from PANOS 4.1 regarding the TCP Sliding Window checks  when the L7 scan is completed (hw session offload) for TCP session?

Thanks

Migrate from ASA 5505 to a PA 3020

Any one know the best what to migrate this configuration from a Cisco ASA 5505 to a PA 3020 here it show run information for the interfaces from the ASA 5505

interface Ethernet0/0

switchport access
vlan 900

!

interface Ethernet0/1

   switchport access
vl

Problem with chained Cert

Hello

I made a CSR. Got my Cert and did the stuff mentioned in the "how to chained certificate", Copied the intermediate on top of my cert.

but the PA-500 did not accept it. okey i tried it without the intermediate cert text - and it worked. Request is

What do WRED drops and Policing drop on qos mean?

Hello

I have made qos configuration.

I have questions when am checking qos.

Look at the following command

show qos interface ethernet1/1 hw-counter

qid   name                 pass bytes       WRED drop   policing drop

------------------------------------

If we configure Dynamic IP address pools to reserve IP addresses, is there any logging of NAT events?

I have been researching Dynamic IP NAT, and have found the option to configure Dynamic IP address pools to reserve IP addresses for translation. Taken from "Understanding and Configuring NAT Tech Note":

Reserving IP Addresses

Dynamic-IP address pools c

IPSEC VPN phase 1 renegotiation

Hello

I am facing packet drops whenever the phase 1 re-negotiates. The SA gets expired and deleted but it takes 20 minutes for it to start the P1 phase again. In that period the traffic times out until the P1 starts again after 20 minutes. Below are t