Hi,Can we see how much cpu is used by vsys's ?Thanks
Is it possible to have multiple shared gateways when running virtual systems.I'm essentially trying to have 1 physical interface, shared among virtual systems, with an IKE gateway configured on it, so I can have multiple IPSec VPN tunnels established on that interface (the tunnel interfaces will belong to different virtual systems). And another ...
hello i'am configuring a paloalto firwall wish is the backward firewall, i'm facing problem with nat , users must be integrated in the frontal firewall users passes by paloalto firewall first then the frontal firewall, when it pass by pan their adresses changes by nat , and the frontal firewall does'nt reconginze them ,wish is a hige probl...
hello everybody,I need to write a rule that allows RPC Service activity for SUN SNMP to DMI mapper daemon.any idea?thanks in advance.
we get the error: Warning: cannot find complete certficate chain for certificate ****we get this error since upgraded, i cannot see any certificate in the webui but everything (global protect and webui) is working.int the export xml i can see those ceritifcates
Hello,I am looking to build a particular security policy where *all* web browsing is permitted, including any applications that the session gets transitioned to as a a result of App-ID figuring it out. For example, a session may start out as a "web-browsing" application but then turn into a "google-maps" application as App-ID figures out what t...
Hopefully an easy one, but I can;t seem to find the answer.What is the default timeout for SSL decryption i.e. how long before a user is required to re-accept an opt-out page?And, what is the CLI command to change this?Many Thanks
We are having a strange issue with GlobalProtect and all Mac OSX that predate 10.8. Clients can connect just fine, but when they try to connect to our NAS, the client's connection to the NAS locks up and then gets terminated, but the GlobalProtect client is still connected. I've asked our server team to look into the NAS logs, but it seems str...
I am looking to put in redundant or active/active VPNs.2 of our sites both have 2 ISPs.Currently the VPN works from 1 ISP on each side.Questions:1. Can I have redundant VPNs?2. Can I load share over those?3. Any tips or docs to configure?Other related questions:1. Is there a feature of redundant routing (automatic) so I can easily set up a mesh ...
Hi,Given a scenario when both HA configured firewalls' license have expired, will my active firewall still fails over to passive firewall in the event of primary firewall failure?thanks,cwong.
After installing the Global Protect Client on our Windows 7 laptops, every time our users start their machines once they login to our network on the LAN the Global Protect Client pops up and wants to connect. Is there a way to supress that popup when the computer starts?
We have a SSL VPN setup through the Global Protect Gateway. The SSL-VPN tunnel is in its own zone and I have an any - any rule for this zone to my trusted zone. I am able to pass traffic to one interface in a trusted zone but I am not able to pass traffic to another interface in the trusted zone. What am I missing?
Hi there,we just configured our first SSL Inbound decryption, but we have some trouble and need help troubleshooting it. Very simple setup:Webserver in DMZ zoneFirewall policy: from:untrust to:dmz; src:any; dst:webserver; app:ssl,web-browsing; service:service-http(s); action:allowDecryption policy: from:untrust to:dmz; src:any; dst:webserver; ac...
Hello Everybody!Our PAN firewallls send their log to a central syslog server; in case there is a gap in the connectivity (e.g. satellite link down) what happens to the corresponding log entries?Shall the remote firewall store them till the connection is available again and then send them to the central server?Thanks and Regards
I have been trying to figure out if there is away to adjust the Threat level of an event under the Vulnerability Protect.For Example I have set certain vulnerabilities to drop packages but I want to change the threat of it so its no longer a high threat. Does anyone know a way to do this or is that field something you cant edit? Thanks for you t...
PavelK
on:
Replacement of RMA
| Subject | Likes |
|---|---|
| 4 Likes | |
| 3 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 5 | |
| 3 | |
| 3 | |
| 2 |
