Dual ISPs VPN failover across both

Trying to provide some tunnel redundancy to some of our AWS environments.  I have 2 ISPs both with an interface/static IPs on my HA PANs. ISP-A is my default with a default route to the internet pointing to its next hop.  

ISP- A Eth1/8 9.9.9.9/24 ZO

Rule Shadow count not working

Hi, everyone. I'm currently working on a new config for a couple of firewalls, but everytime i commit my config I get rule shadow warnings (valid ones) but I can't use the count link to get a list of the shadowed rules. I'm running 10.1.6; is this a

Vulnerability Profile in URL Filtering

Hi All,

So here's a question, when I use global find on the "strict" vulnerability profile (the one included in the software) it shows as being part of a URL filtering profile, is this because I have HTTP header insertion configured on that URL p

How to resume what I left off at Beacon

I started watching Firewall 10.2 Essentials: Configuration and Management (EDU210)

Does everyone know how to resume what I left off before? There is a resume button. When I clicked on it. It just went to Assessment test. However, I am sure I have not

Support Portal - Not Able to Select the Asset

Hello,

I'm Support Portal Page >Support Cases >Get Help in that can't able select the assets   

Find Asset Tenant ID/ Serial 

We can find our device with serial number ; we can't able to select the particular device .

GRE tunnel failover issue

Hi Community,

I am trying to set a GRE tunnel between Palo Alto PA-850-ZTP and zscaler.

Issue:

I have tunnel.1 and tunnel.2 created as Primary and Secondary. 

static routed default towards Internet.

GRE tunnel Primary and secondary configured

Day-zero Configuration of Palo-Alto

Hi All,

I heard day-zero configurations of the Palo-Alto firewall we can perform via the free service provided by Palo-Alto.

Do anybody having the visibility here.

iCloud- Base App ID

Hi Team,

We are unable to see iCloud-uploading and iCloud-downloading Apps in our traffic logs, All the traffic identified as iCloud-base. 

Can someone help me on this ? 

ping: sendmsg: Permission denied to connected router - but can reach destinations beyond that router

Any help is appreciated...

I have a PA interface connected to a router using a /31.  I have static routes with that router as the next hop.  From the firewall interface on the /31 interconnect, I can reach all of the destinations I have static rout