nat with port forwarding issue (migrating from MS-TMG)

Hi,

when migrating rules from MS-TMG to PAN i have encountered folowing situation:

a. web server A is in private dmz zone

b. web server B is in inside zone

Both are listenig on port 80. Problem is in the fact that both are published on the same public IP

Unknown Application Packet Capture

Hi

I want know about Unknown packet capture.

Q1. Where is unknown pcap stored?

[Device] > [Setup] > [Management] > [ Logging and Reporting Settings]

App Pkt Capture ?

Q2. I want know Unknown Pcap Usage.

Q3. When is capture unknown packet in PA packet flo

Domain is pointed as Malware

Hello,

today we had a suspicious DNS Query  warning because we tried to reslove a domain (pandaro.be).

So Palo Alto gets information about domains and checks some information about these domeains.

My questions about this:

1/ What is PA using  to decide w

vpn issue

Hi,

After side to side vpn established correctly after sometime(I do not know how many hours) Phase1 becomes passive.Side1 cannot access Side2.

when we try to use test vpn command for ike it becomes up and it works.What can be reason for that ?

how do I assign multiple networks/subnets using only one physical interface?

I have an isp with 4 ip blocks then another with 3 ip blocks. I plug my 2 isp's in a switch then with only one cable from the switch to Palo Alto then from Palo Alto to my local network.

What I want to happen is that i can choose what isp i want to us

VWire configuration testing

Hi,

At a recent PA training, the instructor mentioned a testing method for testing the configuration of VWire objects and the traffic flow, as configured in your Security Policy.  The goal of this method is the ability to do testing in a lab environme

App and Threat Version fail when update.

When I download and install (choose sync HA) the update App and Threat version 386-1889 (2013/07/30), Dashboard in my device show info App Version and Threat Version mismatch (view attach files). And when I commit any change, HA will not work (view a

Multiple ISP load balancing

We currently have an Internet setup as shown in the image below.   ISP1 is Metro Ethernet running over a disparate fiber path at 100Mbps symmetrical bandwidth.  ISP2 is ATM over 1Gb Fiber, with a disparate fiber path and 250Mbps symmetrical bandwidth