Radius Authentication and NPS

Hello everyone,

I'm having trouble configuring palo alto with a Radius NPS server. Basically we do not want to use chap protocols to avoid enabling reversible password. So we wanted to use EAP-TLS but it does not seem compatible with Palo Alto. Then

NAT & port forward with dynamic IP on outside/untrust/Internet facing interface?

So, I'd like to accomplish the following:

Client A on the Internet needs to access port 80 on server B. Server B resides behind the PA FW in the trust zone. The untrust zone consists of only one interface with a DHCP configured L3 interface. This I

VM-Series 30-day trial not correct login prompt

VM-Series 30-day trial not correct login prompt

only seeing PA-HDF prompt

I am aware there are 3 prompts for login during the initialization phase and the VM seems to keep getting stuck at the second one (PA-HDF). I know the initialization can ta

One isp to multiple isp site to site tunnel

Hi Team,

We want to configure ipsec site to site tunnel between two locations as per below details

1) Location A having single ISP address i.e Wan address  (1.1.1.1/30) will connect to location B having 2 ISP address (2.2.2.1/30 & 3.3.3.1/30) and

Disable IoT Service as workaround of PAN-216043

We are having a problem in our PA cluster. One of the firewalls is restarted and HA is activated. This problem occurs approximately every 3 weeks and the error I found is from Wifclient and according to the paloalto documentation the workaround is to

Impact of run tcpdump on every interface.

Hi,

We need to execute tcpdump in PA-VM for a specific reason. We need to TCPdump data from firewalls for 15 minutes at various intervals; there is no specified source or destination. When we run tcpdump from every interface, we want to know if it

Data From ACC Not shown for 15 minutes and 1 hours

Hallo All,

I have issue after upgrade PANOS 11.1.0, The ACC can not shown data for 15 minutes or 1 hours. except both I mentioned, all time running well.

We have restarted log-reciver and still not shown data  15 minutes or 1 hours.

We have con

Panorama Log Collector Device Replacement

Hi There,

  One of the cluster's PA firewalls was faulty and replaced with the RMA unit. In the environment, we have a Panorama setup as a log collector. As the policy packages are not managed in Panorama, is modifying the faulty device serial number

User ID agent going to non- AD servers

Hi,

We have a userid_agent installed on our server, our security team noticed the excessive session denies between the userid agent server going to other non-AD servers in our azure firewall, can anyone help me confirm if this traffic from our userid

Custom Report not able to see last month report

Hi 

can anyone assist me with the document how to check what went wrong with the report as we generate report last month but only appears recent logs

FYI, we have done generate report monthly previously without issue .

we need to know where we

Global Protect to Manage 100+ FW VPNs

 Does anyone have any good redirects to information about how to manage an enterprise of PA FW's using Global Protect? I'm under the impression that Global Protect is primarily just for use of remote clients. I thought there was a way to use Global P

GlobalProtect authentication with Azure SAML question for multiple portals.

Hi All,

maybe more a question for Azure, will do more research but thought in the meantime id check with the livecommunity also.

so trying to find out if this is possible.. not that familiar with Azure side of things.

we have 1 Panorama that manage