GP stops working when ecmp is enabled

We have Palo Alto firewall with three Internet links. One is a leased line and other two are ADSL links. I have configured ECMP on the two ADSL lines to load balance traffic on the two ADSL links. Global Protect is configured on the leased line. I ha

Stateful Session rely on interface or Zone

Hi There,

  Currently, I'm testing redundancy for vWire pair. I have replicated the existing vWire and sub-interface configuration to another couple of interfaces. Now both the vWire pairs have identical configurations including the zone. I anticipat

Feature suggestion: better candidate configuration highlighting and testing

These are some suggestions that would help a lot when creating new rules:

1. Highlight modified uncommited policies.

You may argue that a user should know what the is chaning, but the problem is multiuser.

When a user has a candidate rule, but ha

Does the NGFW support ADCS?

Just wonder if there's a way to set up ADCS to work along with OCSP.

Rule to be notified when users connect to wifi

Hi guys. Does anyone know how to set a rule to be notified when new users join the network?

URL Filtering

Good day

I am sure this question is answered somewhere but I somehow cannot locate it, so please be patient as I go through the problem we experience.

Our company's US URL is listed as High-Risk when testing it through the URL Filtering website even th

Restoring Palo Alto from AWS snapshot - interfaces etc

Apologies if this is a basic question but first time I do this maybe in a real production environment and I have no prior experience. Does anyone have an example of restoring Palo Alto in AWS (from a snapshot)? Where could things go wrong in the rest

ChatGPT Access

Hi Team,

Users are trying to access ChatGPT and getting error, but we have allowed teh ChatGPT APP-ID and still the same. Not even seeing any error at all. What is the best way to fix it?

Regards,

Sanjay S

NAT traffic from DMZ to another zone

Hallo Everyone,

I am using PA-220

let’s call PaloAlto-Firewall “X”

Office Firewall “Y”

Other firewall “Z”

Firewall X has 8 Interfaces.

Interface 1/1: has the IP-Addressee 192.168.5.254. we assigned this Interface to a Zone Called "DMZ". When this fir

Not able to login into the firewall using admin account

Hi Folks,

We are having PAN-OS:9.1.10 installed on our environment.

We are able to login into the firewall using our admin accounts which are locally created on the firewall with authentication profile set as "None"

Suddenly we are not able to login

URL category block triggers not logging in Panorama

Hi,

I am testing global protect using Prisma Access - Panorama managed..

On panoroma - i have a mobile user security rule applied with a custom URL filtering profile enabled where I have set the action to block for some of the newer URL categories in