how can we confirm if there is existing firewall rule or not in the policy by filtering by source and destination IP address and port numbers.

I can find existing firewall rule in the Firewall policy by searching by just source IP address or Just Destination IP address but our Firewall policy rule base is huge and i need to filter it by Source IP and destination IP address (both) and possib

Web Activity Monitoring for BYOD School

Hello All...

We are looking for a solution for a medium sized private school (k -12) to track users web activity. We'd want to be able to go back a week or so..nothing crazy. But would love to be able to get a report on a site\url and see what user

Bind 2 separate IPSEC tunnels to separate ISPs

I am trying to setup a separate IPSEC tunnel to a new ISP while keeping the rest on the old ISP.  I am doing this as a test.  My issue is lack of connection.  The message I get from the logs is that it try's the connection then I get another saying i

VPN Ipsec SitetoSite DynDNS

Good afternoon everyone, a question, is it possible to set up a Site-to-Site VPN between two sites with Dynamica IP, but that have each their FQDN with DynDns services.

Example:

Site 1: FQDN: mysite1.dynalias.net ( DynDNS )
Site 2: FQDN: mysite2.dynalia

The source port was natted to multiple source ports while the packets leaving the FW

Hello everyone

The NAT type we are using is "Dynamic IP and Port", the Palo Alto Networks firewall translates the source IP address or range to a single IP address.

for this conversion, when the packets arriving the FW, we can see the source port is

log forwarding to CDL is generating high traffic volume

Dear community!

We are sending logs to cortex data lake and we noticed high traffic volume for the sessions concerning log forwarding, with peaks up to 200GB of data sent. 

Do you know if this volume of traffic can be normal?

Also, is there any docume

VPN Site-to-Site FQDN peer ( Dyndns )

VPN Site-to-Site FQDN peer ( Dyndns )

Good afternoon, I am trying to set up a site to Site VPN using as PEER FQDN  myvpnsite2.dynalias.net ( DynDNS ).

Should I also use the Local and Peer identification parameters and settings or it is not necessary?

A

SIP Traffic - End Reason Resources Unavailable

VPN Site-to-Site and Global Protect - DynDNS IP WAN DHCP

Hello, good afternoon everyone, I hope you are very well.

I have a couple of questions, I hope you can clarify and help me.

1.- Is it feasible to create a Site-to-Site tunnel between two sites with DYNAMIC IP ? Example using DYNDNS, in both sites, is

DynDNS Certificate

Good afternoon, I am trying to configure DynDNS on the Palo Alto machine.

In the steps it talks about using a certification profile, and in the Palo Alto instructions, it talks about importing the SSL certificate from the DDNS provider. My question is