Layer-3 Active/Active mode with ARP load-sharing

Hi All

I'm just wondering, if I'm using layer-3 sub-interfaces in active/active mode, is it possible to create ARP load-sharing for each sub-interface on both PA.

by EX: sub-interface 1.102 with IP address 192.168.102.2 on PA-1 and 192.168.102.3 on PA-

How to know object name of OID on PAN

I have an alert system to monitor performance all of device in my system, include my PAN.

I can add all of each oid on the PAN, but I can not know the correspond name of each oid.

Example : OID 11.3.6.1.2.1.2.2.1.10.1 is "ifInOctets"

I have so many oid

QoS Bandwidth Per User

I would like to be able to limit our users to a certain amount of bandwidth at a time.  I know I can do this for individual IPs, however is there a way with QoS to basically say, don't allow each individual IP on the network any more than 25Mbps or s

Do Management Port, Console Port use MP?

Hello~

PA Devices'plane divide MP, DP

MGT, Console Port, Dedicate HA1, and usb port connect to MP

and than the others port connect to DP

If RJ45 or SFP can be given mgt function or HA1 backup port

Doesn't that use dp resource?

If MP is worried Can HA1 Port

Treating & Blocking "incomplete" TCP traffic like a Brute Force?

Short question - can it be done?

Now, I know what "incomplete" entries are in the log - they are failed 3-way handshakes, or ones that completed with no additional data.  The problem is that "incomplete" is not an application or vulnerability that I c

Monitor ISP with PA 3020

What is the method to monitor an ISP bandwidth usage  through the palo alto firewall especially if you do not have google chrome?

Importing a Customized Captive Portal Response Page ... Uploading forever

Hi guys,

I´m trying to import in PanOS 4.1.11 a Customized Captive Portal Response Page and when I click on Import the result is a Dialog Box that says Please Wait and Uploading for ever and ever.

Can somebody tell me how can I import this customized r

Domain User Names not showing in Group-Mapping

This is driving me crazy and looking for some input...

I have the User-ID Agent installed on my single domain controller which is running fine and connected to the PAN on version 5. Using an example below (my domain is different), I've duplicated the