Resolved! Block users

Is there a way to block Guest users using their personal device with the virus or malicious software on it from accessing our network and notify them immediately using response or some sort of redirect page to contact support. Can PAN do this? If so

Resolved! PanVPN agent

Hello admins.

I read in documentiotion that there is VPN client software for Palo Alto devices.

I wanted to try it out, but my licence expired and I can`t access to software page (if there is one).

I would like to know if system supports "client VPNs" (

Resolved! Deploying LSVPN ( Large Scale VPN) with NAT !!!

I'm newcomer with Palo Alto. I have project to deploy PA using LSVPN . But there is a problem because The Internet Link from ISP & MPLS must Via Router Cisco.

But I wonder , when using Router at Border , that means you must NAT Public IP to Private IP

Resolved! GlobalProtect certificates

In my company we have AD and our internal CA. I want to use our internal CA for GlobalProtect. What I have done so far:

     I've import our root CA to PA500 (PANOS 5.0.3).

     I've generated web server certificate and imported it in PA500

     I've cr

Resolved! Global Protect Usage Report

I have created a custom report to track all VPN users by subnet.. I parsed it to user and total bytes.. however, I can only get maximum 500 lines.. we have 1000 GP users, anyway around this?

Resolved! FIPS mode IPSec cipher suite subset

When you enable FIPS mode on the firewall, what are the subsets of cipher suites available that the admin guide is referring to?

Admin guide -

"When configuring IPSec, a subset of the normally available cipher suites is available."

Resolved! Unable to connect Global protect portal,..

Hi All,

I am able to download GP client software, But using the same credential not able to connect to portal, giving error : portal error - unable to connect to portal. Only through one machine i am able to connect to portal using same credentials wh

Resolved! Tunnel Interface IP Address

Can somebody explain to me the need for the tunnel interface IP address? Apparently a VPN tunnel requires a tunnel interface configured with an IP address when using dynamic routing. Is that a dynamic gateway the PA is connecting to or the PA is usin

Resolved! what is standard port of ms-dtc app-id?

Hello.

I checked that ms-dtc standard port is tcp 139 on applipedia. I created couple of security rule for ms-dtc app-id and one was applied application-default at service column and other was applied specific service port tcp-49210, tcp-49217, tcp-49

Resolved! Why the User-ID Agent status of passive device on HA mode shows not-conn:idle?

Hello there.

I have a question related to a User-ID Agent.

My PA-5050 is configured with HA mode (Active-Passive).

Couple of devices are connected User-ID Agent.

There are user agent connection status on the both of devices.

Active Device

Name