General Topics

MigrationTool

Hi,

i am new in town. I am trying to convert a Cisco PIX to PA sintax usin the MigrationToolVM.1.5 (i only have a 32-bit cpu) and i am not abe to create the XML file.

Dynamic Objects Error

I’m trying to test using dynamic objects on 5.0 however I’m not sure If I’m missing something?

The document suggests the syntax to add a new entry do a dynamic address object is as follows:

https://<IP>/api/?type=user-id&action=set&key=<KEY>=&file-name

SSLVPN for linux and Android/iPone client

Hi all,

Some of my users are software developers using linux laptops to connect and we are replacing corporate BB with Android/iphone phones. I wonder whether these clients are supported?

Thanks!!

Peter

Chromebook VPN

I have the need to establish VPN connections from Chromebooks.  My initial research is not real promising,  So far I have determined:

1) There is no GP Client for the Chromebook.

2) The Chromebook only  supports:

• L2TP over IPsec with PSK
• L2TP over IPsec

Assign static IP through LDAP for GlobalProtect Client

Hello,

For Cisco ASA, I can configure fixed IP address for SSL VPN user by using LDAP attribute "msRADIUSFrameIPAddress IETF-Radius-Framed-IP-Address ".

(SSL VPN is authenticated by AD window 2008).

Now, I'm using PAN and I don't know how to configure a

Setup Alert for Traffic to Specific IPs

We are trying to figure out if there is a way to have the firewall create an alert in the logs when traffic hits a specific IP range. We don't want to block access to this range of IP addresses but we want to be able to confirm if users are conversin

Possible Bug in Global Protect

I am wondering if anyone else is having this issue.  We are using on-demand mode.  When setting up a new laptop we install the 1.2.5 agent.  At this point our helpdesk tech is logged in and the VPN connects correctly as it is our process to test it. 

PAN Agent to FW connectivity

Guys,

we have a PAN agent User-ID version 5 running on the network, all is working fine, but just that
on the PAN agent User ID, I see only one device PA-FW as connected.

The active one, and the standby does not show up.

Is this the right observation, or

UserID debug Log. high load CPU?

Palo Alto support ask me about send them the debug lof of UserID. I can enable this debug log with my DC in production. There is risk about load CPU in the UserID device (Domain controller). I could do it in production?

thanks