UserId Mapping Issue - Regex Issue

We have a user id mapping coming initially as useraname@company.com as we are moving away to a different authentication, the username is coming as company\username and we were inserting default domain as the domain of the company.

we were getting u

ZTP stuck at Connected no

I have a pair of 3410s that I am trying to onboard through ZTP. I have gone through the steps of setting up a cert on the PA and registering the firewalls. However the device state in panorama shows disconnected. I can confirm that the firewalls can

VPN Traffic to Internet

Hi Team,

We have a requirement. Our PA Firewall has internet connectivity and VPN set to one of the peer end Forcepoint device.

VPN is up and running. Traffic from Forcepoint LAN to MPLS connected to PA is all working over the VPN.

Now the requiremen

NTP Best practices

Hello,

I have a PA firewall without panorama, at present I have public ntp servers in sync with pool.ntp.org which are default from PA. Is this good to use public NTP server or local NTP server ? Please let me know the best practices on this.

High Availability on ESXi for Panorama VM

dns-signature cloud service connection refused.

Greetings:

I am seeing in the System Log the following message "dns-signature cloud service connection refused"  Checking the traffic logs the management IP address is not being blocked.  Where do I look to resolve this error message?   Thank you.

API to tag shared policy

We have few shared policy and need to tag and disable them . Please help me with API deatails

Session Expire Time one month

The session expiration time is more than a month apart.

I'm using the 10.1.8 version and my search says it's a firmware bug.

However, the same symptoms appear in version 10.2.1.

Is there a solution in relation to it?

Commit Error

Hello.

After adding the allowed IP band, I pressed Save, but it is failing.

URL Logging - only custom allowed domains are showing up

Hi there,

I'm trying to get URL logging to work.

At first: I don't have the advanced url filtering license, maybe that's why....

I have got a custom url category with some domains which I want to allow, those urls in this list are logged fine.

when I connect to globalprotect, it show VPN certificate is not within its validity period

after show this error, can't connect to any internet or intranet, and the system date auto changed to 2013

how to fix this issue? Many thanks.

How to configure VPN and Certificates to cut VPN access when the Certificate is revoked.

Hello team,

I need to know How to configure VPN and Certificates to cut VPN access when the Certificate is revoked.

I have revoked a certificate into the Firewall but I can connect anyway from VPN.... I am using on my GlobalProtect connection and