About User-ID configurate

Hello,

My User-ID agent was successfully linked to PA and I also saw Source User in the log.

I then configured the LDAP and group mapping and applied its source user to the new policy and wanted to verify that it worked.

I found that the PAs we

App Google Earth

Good morning, I have a problem opening the google earth client to users. For some time it seems that randomly it also needs the google-play application to be open, if you want to have the latter closed to the user there is some way to make an excepti...

Inbound NAT for multiple VMs through single Azure firewall

Hello,

One of my customer purchased an instance Azure VM-300 firewall recently. The customer has approximately 25 applications in the Azure network and they need to publish these applications to the internet users through the Palo Alto firewall. Each

link-change still informational severity?

Can someone explain to me the rational behind allowing an interface to drop and having the link-change log a down state and yet have it be INFORMATIONAL severity level? I saw an old question about this and it seems somewhat ridiculous?  We had filter

speedtest is not correctly identified with and without decryption 10.2.4 latest app-id

hi guys, 

I searched through and it looks like it's an know issue that speedtest.net is not correctly identified by app-id 

I use app -default setting on the policy 

The policy cannot  really see speedtest.net's traffic and identifies  the traffi

Untagged subinterface NAT

Hello all,

I've been reading on untagged subinterfaces and I'm not sure this scenario would even work for what I want to do. Basically I want to segment different two zones coming over the same interface. I usually accomplish this by creating a vir

lacp worker poll timer interval too short

Software Version 10.1.8-h2

2023-03-17 16:18:48.037 +0000 phase1 completed
2023-03-17 16:19:35.133 +0000 start phase2
2023-03-17 16:19:35.133 +0000 Configuration not changed.
2023-03-17 16:22:41.815 +0000 Warning: pan_lacp_worker_poll(pan_lacp_thread.c:6

Add Multiple DNS Suffixes

Is there a way to add more than one DNS suffix to DHCP?

I know in Mac OS X I can add multiple search domains, but I don't want each user to have to do this, nor type in our long domain names each time either.

Thanks!

Avaya 9611G/4610SW VPN to PA-500

Has anyone had success connecting Avaya IP phones via VPN to PA devices?  I am able to complete IKE Phase 1 authentication, but fail Phase 2 due to local/remote proxy IDs not found:

'IKE phase-2 negotiation failed when processing proxy ID. cannot fin