PAN-GPLimiter: Limit Concurrent GlobalProtect Sessions/Connections Per Unique User

PAN-GPLimiter: Limit Concurrent GlobalProtect Sessions/Connections Per Unique User

Hi All,

I would like to introduce my Go program for limiting concurrent remote user logins in a single GP Gateway on a PAN-OS Firewall.
(Keywords: Limit the maximum

License for feature lcaas will expire on 2024/10/30

From the system log, i find a log severity is Critical.

The message is 

"License for feature lcaas will expire on 2024/10/30"

what is lcaas ?

how can i deal with this message ?

Migrate the active directory services from onpremise to EntraID (Azure),

Hello team

We want to migrate active directory services from onpremise to EntraID (Azure), how can we integrate the UserAgent in Palo Alto?

Greetings

OPT/PANLOGS Partition Getting High and Increasing Usage Every Day

Hi all,

i have PA 7080 that recently upgrade the firewall 10.1.10-h1 to 10.2.9-h1. Since then the percentage disk usage is increase every day for /OPT/PANLOGS.

is there unknown bug for this kind of thing?  how to troubleshoot in TSF for this kind

Can't add tunnel interface created by restapi, to Security Zone using restapi.

Using restapi to create IPSec tunnels for a new firewall attached to Panorama. 

I create the tunnel interface using restapi. I can see the new interface successfully created in Panorama. 

When I try to assign that interface to a Security Zone it fail

URL filtering custom block-continue page best practices

Good morning all,

Can anyone point me to any documentation about best practices for the URL Filtering block-continue page's response page variables in javascript code. While the following tech doc is useful:

https://docs.paloaltonetworks.com/advanc

Clarification Needed on Multiple Static NAT Rules with the Same Public IP Address

Hi Community,

I’m working with a customer who had previously configured a dynamic IP source NAT rule with only one address in the pool. This setup worked as expected for just one PBX since after the first session, the public IP would be in use, limit

questions while creating first IPsec tunnel

We have our egress on Eth1/1 with a public IP assigned by our provider.
We also own a separate public subnet.
We have the internet working and want to add an IPsec tunnel from our PAN to a partner also running PAN.
I'm told to continue using the Eth1

How to limit concurrent GlobalProtect connections per user

Hi communit

So far it isn't possible to limit the concurrent GlobalProtect connections per user directly in PAN-OS. There is a feature request #4603 for which you can vote and wait/hope that this will be implemented.

If you need a solution (worka

Find more info about process based on PID

The command 'show system resources' lists the active processes and their PIDs and their resource utilization, but is there another command where based on the PID I can get more info about a specific process ? 

Similar to show jobs all shows all the jo

DHCP Relay

PC1 in DMZ Zone cannot receive IP from DHCP Server. I already allowed DHCP Traffic in firewall and also configure DHCP Relay which is ethernet1/4 interface with dhcp server ip 192.168.10.1 

NOTE: i have configured vlan: 192.168.10.0/24 

Boot PXE Fog

Hello everyone,

I have a little problem with my boot PXE with Fog server

My station boot on port 69 at the gateway of his network

Fog server and the station they are not in the same network.

I tried to use DNSMASQ but that not resolve the problem