Guide for troubleshooting Nats security policies

Looking to see if there is a troubleshooting guide for NATS and for Security Policy rules.

Searching has turned up various hits here and there, but not something comprehensive as what cisco has on their site for their docs.

Am I just looking in the w

Support portal login error

When I tried to log in to the support portal, getting the below error, earlier I used to login into the portal.

my name : Arumugasamy

em

Change HA pair from Active/passive to Active Active

Hi All,

I will be changing one pair of our firewalls from an active/passive pair to an active/active pair. Whilst confident of what is needed and the process I need to take, has anyone ever gone through this process? Was it problematic, time consumin

PBF Issue

Hello, i have palo alto with 2 ISP(A and B) and 1 internal connection

i enabled the ECMP + simetric return and ecmp setting IP Modulo.

my goal is, force 1 IP segment to ISP B to go to the internet

i already setting in PBF, using enforce return simetric

Vpnc client region null

Hi all,

I'm trying to connect to vpn using vpnc.

Everything works fine, but if I restrict the region in the gateway, vpnc does not connect because it is shown as "Client region: (null)"

Any experience on this?

Thanks

User-ID with 802.1x problems wired and wireless

Hi all.

We have PA-820 with 10.1.2 with User-ID Agent on Windows AD runing version 10.0.4-r23 and we are using Cisco switches for users. We have 802.1x enabled on ports for users. The problem we have is, that PA doesn't recognise users from 802.1x, i

Interfaces in power-down state

Hi all...I have a Palo Alto Active/Active pair and the HA3 link between them is down. Will PANOS then power-down all other physical interfaces when the HA3 link is down. Just looking for confirmation that this is expected behaviour or whether I have

Decryption or blocking NordVPN

Is it possible for Palo Alto Firewall to decrypt third party VPN agent traffic such as NordVPN, NordLynx like decrypt HTTPS web-browsing traffic?

If it cannot decrypt these traffic, anyone know the App-ID for NordVPN, NordLynx?

I found some VPN app-ID

Url problem

Hello everybody.

I allow a url. I also allowed categories for that url, but the site still doesn't work properly. There is a problem connecting to a server on that site and it is deny

Thanks in advance