How to troubleshoot Layer 2 related issues?

Hi,

I am a newbie here, How to troubleshoot Layer 2 related issues?  In a cisco switch, these counters are available for viewing,

IPSEC VPN - Theoritcl versus actual tunnel numbers

Hi.

Has anyone done a large-scale implementation of a number of IPSec VPN's through a Palo Alto?

I'm interesting in knowing how the boxes compare when comparing "Specifications" versus actual use.

For example, my PA 2020's are rated to 1000 tunnels, 200

About spotflux

Hi all,

Does anyone have spotflux application's custom signature.

Thanks.

Custom Reports-Elapsed Time (sec)

Custom Reports-Elapsed Time (sec)

I was wondering if anyone could advise how the Elapsed Time (sec) is calculated from the Custom Reports Traffic Log database. I have tried to convert the time that is captured and reported in seconds into hours/minute

Palo Alto and Cisco Wireless Controller

Dear All,

We have a Cisco Guest Wireless controller in the DMZ. A tunnel is established by the Cisco wireless controllers in the internal network to the wireless controller in the DMZ. The issue is the Guest users loose their connection intermittently

Remote access with mobile and 2-factor auth

Hello all

My customer want remote access with mobile and 2-factor auth.

I know Global Protect with laptop can operate 2-factor auth (with Nordic Edge , RSA).

Can GP with mobile operate possible 2-factor auth???

Thanks

about global protect agent default behavior

Hi All,

Is there any one knowing that global protect client will cash or keep user credential in the local? is the default behavior or not?

Our PA runs PanOS 4.1.10 and global protect client's version is 1.1.7.

Thanks.

Regrads,

Joy

DHCPv4 server and v6 relay

I'm having some problems setting up DHCP for v4 and v6 simultaneously. PAN-OS 5.02 can handle DHCPv4 but not v6 so I thought I'd let it handle v4 and then create a DHCPv6 relay, but that doesn't seem possible even if I uncheck IPv4 and only check IPv

Client VPN query

Hi,

I am new to looking after Palo Alto firewalls,

I have setup a small network for my client using a PA-200 as my firewall.  Users on the internal network can get out to the internet via the NAT and security policies.

I have one user who works for a s

URL expression

please, how to write url expression if I want to block all domains including some word e.g.xxxx.

exapl blocked domain nicexxxxday.***

Inbound SSL Decryption and virus block Response page

I use Inbound ssl decryption.

when virus detection, I want to  display block page for client.

Can you is it?

I want to know design.

can do it, or can not do it?

Regards,

l