nat failover ?

hi,

is it possible to do a nat failover for two server e.g :  one static nat from 1.1.1.1 to host_1 in case of the host is down ( link or system crash) the nat will change to host 2 instead of host_1.

attached simple diagram of the iissue.

Backup IPsec tunnel to home site ASA

I have a remote site with a PA500 and two ISPs.  I would like to have all the browsing traffic go out ISP2.  I want an IPsec tunnel traffic to go through ISP1, unless ISP1 service goes down.  The home site has an ASA, and I can put a second IP in it

Best practice for setting security policies between trusted zones?

Is it best practice to combine all trusted zones into one policy? (See below)

Or Split them out like this (See Below)

Publishing application like OWA , or RDP to servers to SSL portal.

Hi,

Is it possible to set up the Palo Alto to publish internal applications on the SSL vpn protal ? Just like the Juniper SSL devices lets you do ?

Regards,

Sunil

DP DDR0 ECC single 65, double 56, dimm 0, rank 1, bank 4, row 0xa3c column 0x110

Hi all. I got this "error" message in system logs.

Does anyone know what it means?

DP DDR0 ECC single 65, double 56, dimm 0, rank 1, bank 4, row 0xa3c column 0x110

Sincerely

pa500 - running panos 3.1.7

SSL VPN and supported client

Hello all

quick question. one of potential customer want install SSL VPN on their POS system. but that systems hosted on the Windows CE OS.

on the manual it's look like we only support "Windows 7, Vista and Windows XP".

my question is, do we support Win

Question about SSL-VPN Client 1.3.0

I noticed there is a new version of the SSL VPN clinet version 1.3.0

Trying to find documenatation on it

when I click on the release notes in software manager it mentions PAN OS 4.02

is this a 4.02 ONLY release of the client

are there any bug fixes or im

4.0.2 vs 4.0.1 package update size

Hello,

I noticed a good size difference in package size from .1 (276MB) to .2 (141MB).  When updating from 3.x - is it recommended to start with 4.0.1 and then go to 4.0.2? Or going right to .2 is acceptable? Thanks!

Mike

Vulnerability assessment (False Positives and Evaluation Method)

Is there a good write-up on how the vulnerability assessment is performed and how it actually works?  Specifically, we had a web server set up in front of a MSSQL server -- for hosts connecting to the web server from IP segment "A" it worked fine, bu

Source Host and Destination Name Resolution in Reports

Hello,

This inconsistancy has followed the 3.x code into 4.x code for me.  When I create a report and "run" - I can get source host and destination name resolution.  If I export to PDF or CSV - the name resolution is replaced by the straight IP.  Howe