PA 2000 platforms rebooting in our network

We have deployed around 10 pairs of PA 2000 platforms in different networks within our environment.

These networks almost generate the same type of traffic. What we experience is that, these firewalls which ever is active, goes in for an automatic reb

User-ID on-box Best Practice

Hi,

Can anyone clarify for me what the best practice recommendations are for the User-ID agent?  Prior to V5 it was clear that they should ideally run on the domain controllers or servers close to them.  However with the option of running on-box, is t

Shrew Soft VPN (XAuth) connected but no traffic

  I can connect successfuly thru the Shrew Soft VPN but I cannot get access to the internet.

I tried both "Obtain Topology Automatically or Tunnel All" and setting manually Remote Network Resource 0.0.0.0/0 but neither one worked.

Any ideas?

tunnel interface in PBF rule

Hi,

Can anyone please help to resolve a small issues.

1) Can we use tunnel interface in PBF rule if yes please provide a sample configuration.

2) I have 2 ISP's terminated on my PA firewall, i require a failover to 2nd ISP if my Primary ISP is down by m

Is there a way to search on the network monitor window for a particular subnet ?

Is there a way to search on a particular subnet range in the monitor / network monitor view ?   This would be a great feature for us as we (Data Center) monitor the URL usage globally and would like to drill down to a single subnet (location) to vie

configuring L2 aggregate

i need the steps to create L2 aggregate interface

dhcp relay

After enabled dhcp relay on a interface the client`s didn`t get a ip address, the strange thing is that de palo denied the packets. So i must create a access rule to enable traffic from the palo interface (with dhcp relay enabled) to the dhcp server.

Admin Role & Dashboard Log Widgets

So, I'm teaching a PAN-EDU-201 class this morning and when we were discussing the Admin Roles, one of my students asked a question about the Dashboard Log Widgets. The question was, if I create an Admin Role and disable the Monitor Tab (which disable

4.1.12 early adopters...

Am I the only one who is adopting a "once bitten, twice shy" approach when it comes to 4.1.12?

The release notes claim that PAN have fixed the bugs I've been bitten by - the userID process problem, the App Override killing TCP sessions after 10 second