PBF on 2 internet links on same ISP

Hi,

I would like use PBF to secure and share 2 internet links (same ISP)

When I configure public IP on the PA interfaces I have an error due to LAN overlap.

the primary link

eth4  x.y.z.99/24

the second

eth3 x.y.z.185/24

the ISP gateway is x.y.z.254 same f

Sample Configs

Are there any links or references to a complete sample config for the PA firewall?  I would like to see complete NAT examples and security policies for both inbound and outbound traffic.  The Understanding NAT guide covers the inbound policy but not

How to config GER Tunnel on PANOS 4.1

Hi All,

Are there any documents for config GER Tunnel on PANOS 4.1?  I have searched many times in KP, but not found.

Regards,

Joy,

Globalprotect client download froze

I have encounted an issue with GlobalProtect. When I click any of the 3 download links of GlobalProtect Agent from the portal page. The download started, but after a few minutes it froze. I tried on 2 machines with different OS (windows 7 and windows

Network address Translation (NAT) support for IPSec ESP

I have an IPSEC tunnel with a third party and they require that all traffic coming from me to be NATted as they will only accept data traffic coming from the IP of the NAT within the IPSEC tunnel.

I have been unsuccesfull in trying to figure out how e

Export

Hello, is there any posibility how to export list of computers from Objects - Address Groups. I have there one group of computers FQDN specification and I would like to export it.

Thanks for advice

Brano

Layer 3 VLan on PAN OS

Hi all,

I'm hoping someone can help shed some light on an issue I'm having.

quick diagram:

       Vlan 9                  (Layer 3 Interface for Vlan 9)                    VLAN 9

(CISCO SWITCH)-------------[PALO ALTO]---------------(CISCO SWITCH)

Zeus (aka Zbot, Wsnpoem) ignored by PA ?

We subscribe to an outside service that monitors our traffic. We regularly get reports about the Trojan Zeus being identified from various different internal clients. Why isn't PA blocking this ? Here is some info about the Trojan:

Regarding Zeus:

Zeus

Using User ID Agent with Exchange servers and event ID's

I have the user Identification agent up and running against my domain controllers and exchange servers, but I am not seeing any mappings coming from the exchange server from users connecting using Active Sync from phones.

When I run "show user ip-user