Resolved! HA configuration & License Expired

Hi,

Given a scenario when both HA configured firewalls' license have expired, will my active firewall still fails over to passive firewall in the event of primary firewall failure?

thanks,

cwong.

Resolved! GlobalProtect Client Startup

After installing the Global Protect Client on our Windows 7 laptops, every time our users start their machines once they login to our network on the LAN the Global Protect Client pops up and wants to connect. Is there a way to supress that popup when

Resolved! VPN SSL traffic

We have a SSL VPN setup through the Global Protect Gateway. The SSL-VPN tunnel is in its own zone and I have an any - any rule for this zone to my trusted zone. I am able to pass traffic to one interface in a trusted zone but I am not able to pass tr

Resolved! Vulnerability Protection Threat level

I have been trying to figure out if there is away to adjust the Threat level of an event under the Vulnerability Protect.

For Example I have set certain vulnerabilities to drop packages but I want to change the threat of it so its no longer a high thr

Resolved! session table

Hi,

is it possible to use a PAloalto firewall not to keep sessions and works like a non stateful Access Control device.

Thanks.

Resolved! Multi AD groups for Global Protect access

Hi All,

I have a Global Protect access question for group. I have given access rights to a VPN user group and assigned the AD membership that almost all of our staff is a member of to it and its been working well. Now I need to add a second AD securit

Resolved! non-syn vsys

Hi,

is there an option to Set the vsys (not Firewall or zone) to Reject non-Syn First Packet?

Resolved! commit is failing

unable to commit please help in troubleshooting

PA version: 5.0.3

thanks

admin@PA# commit force

..........................

Management server failed to send phase 1 to client authd

Commit failed

[edit]

admin@PA# run tail mp-log authd.log

Jul 11 17:33:53 pan_au

Resolved! DHCP server runs out of ip pool interface Error

We are using a PA-200 for our test network and have DHCP configured on the FW.  We have test devices that generate a new MAC address everytime it reboots.. so our scope is out of address.  Is there a way to clear all current IP's and start fresh?