General Topics

IPSec Child-SA rekey negotiation fails

Our customer encounter intermittent connectivity issue with IPSec IKEv1 during phase 2 rekey of IPSec Child-SA. We open case with the IPSec peer device vendor, they mention that PAN is not sending message to R2011 (IPSec peer) for deleting the SA whe

Configure L2 service on Active-Active Mode

I'am using PAN-PA-3220

We want to setup this model with:

1. HA (active-active)

2. Interface configuration using Layer 2 configuration

Is it possible to done it?. as when I try to create Layer 2 configuration. It always pop out error "Layer 2 unable

SSO not working properly

I have just setup SSO in our new eng panorama. When I tested it initially it gave me the error message "Error Displaying SAML error response page". I reached out to our team and it was noticed that the new saml app had fewer claims and attributes tha

Certificate delete

Hi

i have a problem certificate delete. But sow error Failed to delete Certificate - CaptivePortal.  °  CaptivePortal cannot be deleted because of references from:

i look to to ssl/tls service profile list not show profiles. plase help mee 

Clarification regarding vsys function and network isolation

Hello,

After reading about and looking through documentation regarding vsys, and routing between vsys on the same firewall via use of external zones, as well as the vsys<>VR association, I have a few questions I would like to clarify if possible:

1. If

Suspicious URL detection by cortex

Hi All,

Will cortex be able to detect if there is any malicious URL clicked by user?

Also, would like to know how cortex detect the ransomware attack.

Regards,

Sakshi Seth

Proxy SG to Palo alto policy migration

Hi,

Is there any automation tool through which we can migrate all our proxy SG policy rule, object and object group to Palo alto. Or else if there is any alternate option then please let me know.

Global Protect Linux and Strongswan

I had to test IPSec connection on Linux using strongswan as part of a support case i was working on and i collected a lot of good information on how to get this working. So i thought i would share it with you.

Tested on PANOS 7.1.2, Ubuntu 16.04, St

Cortex XDR agent change managing server

Hi All,

Looking for best way to migrate cortex XDR agents to new tenant in bulk.
I have downloaded all the hostnames in excel format and when i try to paste it on the XDr console filter section it doesnt work.

Please comment