HA to standalone best practise

Hello,

Good day, I have found many articles related to configuring standalone to HA. However, I don't find related articles for HA to standalone.

Is there any good reference guide for changing role from HA (active-active or active-passive) to standal

File blocking allow MS 365 Office installs and Windows updates

Hey,

If at all possible, please could I ask for some input on the best way I try allow M365 office installs (from their CDN) and Windows updates to our endpoints even though we are not using SSL decryption at the moment?

We currently have a policy rul

CPS for Flood Protection

For the Flood Protection calculations:  Alarm, Activate, and Maximum - the documentation states to use the baseline thresholds (average) for the zone.  I have used the OIDs to do this, however, why would I be using the TOTAL ZONE baseline and not jus

PCCET Certification Badge???

Is there a way to display a badge for taking these courses?   I says I have passed but I cant find a way to carry it over to Linkedin 

Why Destination NAT is not working for internal users.

Why Destination NAT is not working for internal users. Why need to create U-Turn NAT if we have existing Destination NAT created and if internal users want to access it.

Identify the user account while using RDP on desktop

Hi,

This is just an query, so that I can understand this topic better. Bear with me, since I am not a network specialist.

Environment

• User works remotely on a laptop and uses GlobalProtect VPN client to remote in on a desktop
• The desktop is located in th

Multiple IKE crypto profiles on individual interfaces for multiple IPSEC tunnels

Hi,

In 2021 we ran into the issue where it seemed between PA-OS 8.1.x and 9.0.x/9.1.x Palo began either via a feature or bug introduced began enforcing the scenario in the subject line and began dropping tunnels after upgrading and causing issues wit

Can CFF format remove the double-quote

HI,

As PA document, https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/escape-sequences.html,

To maintain backward compatibility, the Misc field in threat log is always enclosed in

Is it possible to DDoS/DoS a public IP which has only outbound traffic and ipsec tunnel. No DNAT configured and ping disabled.

Multiple IPSec tunnels, single external IP

Looking to set up a POC with a PA-820 that has the following

• IPSec VPN site-to-site between our local facility and 3 partner networks
• Single external IP, 3 tunnels (IKE P2)
• NAT to a single host on our local private network

Is this reasonable/possible?