vpn issue

Hi,

After side to side vpn established correctly after sometime(I do not know how many hours) Phase1 becomes passive.Side1 cannot access Side2.

when we try to use test vpn command for ike it becomes up and it works.What can be reason for that ?

how do I assign multiple networks/subnets using only one physical interface?

I have an isp with 4 ip blocks then another with 3 ip blocks. I plug my 2 isp's in a switch then with only one cable from the switch to Palo Alto then from Palo Alto to my local network.

What I want to happen is that i can choose what isp i want to us

VWire configuration testing

Hi,

At a recent PA training, the instructor mentioned a testing method for testing the configuration of VWire objects and the traffic flow, as configured in your Security Policy.  The goal of this method is the ability to do testing in a lab environme

App and Threat Version fail when update.

When I download and install (choose sync HA) the update App and Threat version 386-1889 (2013/07/30), Dashboard in my device show info App Version and Threat Version mismatch (view attach files). And when I commit any change, HA will not work (view a

Multiple ISP load balancing

We currently have an Internet setup as shown in the image below.   ISP1 is Metro Ethernet running over a disparate fiber path at 100Mbps symmetrical bandwidth.  ISP2 is ATM over 1Gb Fiber, with a disparate fiber path and 250Mbps symmetrical bandwidth

How to create custom vulnerability signature for SIP packets?

Hi,

we are trying to create  custom vulnerability signature for triggering on the specific string in the udp packet payload with  destination port 5060. Unfortunately there is no context for SIP. We used "Pattern Match" and chose "unknown -req-udp-pay

Load Balancing L3 and VW

Is possible create a Load Balancing with a L3 interface and VW Interface?

Suspicious DNS Query's

Hello,

We are running version 5.0.6 for a few weeks now and looks very good.

We see now also in our threat detection the following threat "Suspicious DNS Query : ......" and this is blocked.

This is very cool to block at dns level spyware and malware bu

Cant login to PA-VM300 via ssh or HTTPS

Can anyone help me here.. I recently installed a PA-VM300 and all efforts to login via https/ssh has proved abortive. I had to work my way via CLI to connect via http.

Also everytime i click on commit on the PA-VM300, I get logged off , and always ne