Enforcing Global Protect only on remote sessions

My company only allows company issued laptops (Windows only) to remotely connect to our network via VPN. Since these are company devices I feel they should always be restricted to company internet usage polices that only allow access to approved site

Clear Text and Tunnel traffic same physical interface QoS

Hi,

I have a scenario in mind, for example: 

1. We have physical interface for Internet link with a bandwidth of 50 Mbits/s, which is used to peer with our ISP and send internet-bound traffic through;

2. We have regular internet for users and VPN

site2site vpn. calling end is dynamic

I have a Palo gateway connecting via ipsec to a Palo gateway, the calling end has a dynamic IP and will need NAT-T.  The called end has a static public IP.  Whats the recommended method of using an identifier?

FTP (SCP) Error

Finished generating reports. Please press enter to continue...
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THA

uninstallation password

I don'nt know the uninstallation password and I cannot change it as the save option is greyed out

The specific URL is not shown in the traffic log

PAN OS 9.1.7

The following traffic log shows the  specific URL

The other traffic log doesn't have the specific URL, and also this log cannot be seen in the url filtering log 

Is this a expected behaviors or something wrong with the customer's envir

IP SLA

Hi,

Could you please help me with a small query.

Do we have any concept like IP SLA   to monitor an ip and deactive route in a routing table.

Thanks

Raj

Adobe Creative Cloud -- Block Uploads

Hello has anyone had any success with blocking the ability to upload content via Adobe Creative Cloud using the Palo Firewall ?  Is it as simple as creating a rule to block UDP\443 traffic for either QUIC, the domain, or both? 

Pancast: Have an Idea for an Episode?

Hey Everyone! Have you listened to the PANCast podcast? 

PANCast is a Palo Alto Networks podcast that provides actionable insights from cybersecurity experts to customers, helping ensure each day is more secure than the one before it.

Since launc

Commit Error After Upgrading to 10.0.9

Hi Team,

Getting below commit validation error after upgrading to PAN-OS 10.0.9. 

• Validation Error:
• rulebase -> security -> rules -> QUIC_Deny -> hip-profiles unexpected here.

Change HA setup A-A to A-P

Good Day. I am looking for pointers wrt changing the HA setup from A-A to A-P mode.

The existing setup is for PA-5200s and they are in A-A mode with floating IP bind to active-primary (logically active-passive) and the HA setting is locally managed.

Customer Portal Software download issue

Hi All,

is anybody experiencing download issues with Support Portal? I'm not able to download any file and all the categories are not showing any results.

Thank you

PCCSE Exam voucher

How long do I have to wait for the PCCSE exam promo code...?