IPSec VPN Issue

Hi,

on a PA 2020 running 4.1.0 is a VPN Gateway configured. A client PA 500 running 4.1.0 with dynamic WAN IP is configured as peer. Both devices can reach each other. In system log is a succesfull phase 1 and phase 2 and a succesfull ipsec connection

Multiple External IP Problem

Hi all

I have a brand new PA500 that I have setup and everything is working fine in the outbound direction e.g. i can access the internet etc.. the problem i have is in the inbound direction. My external interface IP address is set to 89.238.148.194/2

URL Filtering - Blocks msn live and yahoo messenger

Hi All,

I wonder if anyone is facing this issue... If you enable web-based-email inside ssl decryption rules, it will also block user to access both msn live messenger and yahoo messenger (this does not happen to skype of course). Even though, the exi

Report: Top URL categories per user

I've been asked to run a report on the web usage of a specific department and I happily generated a report of users from that dept in order of how much data they have used. Then the department head asked for it to be broken down so that for each user

VPN tunnel Site to site failing

hi I had a working VPN tunnel and t was working for more than 100days then all of a sudden it stopped working

and the rrrors i am getting is

IKE phase-1 SA is deleted SA: MY-IP ADDRESS [500]-REMOTEIP_ADDRESS[500] cookie:ea25f2fa99b81f69:000000000000000

what is the processor named webapp3?

Hi

Mgmt cpu was reached to 100% during a hour.

i was look into a reason that why cpu usage hit a peak.

processor named webapp3 was  high usage during cpu reached to 100%. (it was almost 95%)

i don't know what is the role of this processor.
Please let me k

Portal Error when using GlobalConnect client

We have 1 PA-500 which we recently upgraded from 4.0.5 to 4.1.4.

On 4.0.5 we used the NetConnect client for several users without any problem.
Now we upgraded to 4.1.4 we need to use the GlobalConnect client.

So I downloaded and activated the 1.1.4 clie

Missmatch in App/Threat Version HA

My second PA says it use 302-1357.

But It acctually says it have 304-1366:

Both my PA's say they have 304-1366 installed under "Device > Dynamic Updates"

But on my dashboard they say its missmatch...

Any one know what i should do? Everything works fine b

User-ID Agent

Is it possible to use the User-ID Agent to scan the logs from a machine configured as an Event Collector.  I have an event log called "Forwarded Events" which holds centralised logon/logoff events for another tool.  It would be good to leverage that

Server profile KERBEROS with group mapping

Hi guys.

I have  a doubt .

When i configure my Kerberos on my server profile , i can`t make group mapping settings to catch my users from AD and make a Policy for them ?

My PAN OS is 4.1.0

In other versions it`s possible to do with Kerberos OR i need to