Zone Based Policy in PANOS SD-WAN (not PRISMA)

Hello,

In PANOS SD-WAN (not PRISMA), you must either use predefined zones (zone-to-branch, zone-to-hub, etc.), or you can map pre-existing zones to the predefined zones in Panorama.

Before SD-WAN, using IPSEC tunnels, we could give each tunnel/branch

Authentication failed captive portal

Hi Expert,

We got error message "Invalid username or password" when try login to Captive Portal and affected a lot users.

There is no changes made and it is working last 2 days.

I look into Solved: LIVEcommunity - captive portal authentication fail

Whats is the best DFA (and free) to combine with LDAP in Palo?

Hi,

im looking to configure DFA in GP. We already use LDAP but we want to add another authentication. Any idea?

microsoft is free?

i know google authenticator is.

Audio drops after 15-30 seconds for incoming calls

After our upgrade from PanOS 9.1.12 to PanOS 10.0.8, We've been experiencing this issue where our incoming calls will work fine for several weeks, then out of nowhere (randomly at any given day), incoming calls will drop after 15-30 seconds after the

Listing PCAP rules

Does anyone know if there's a way to search for rules within the Palo Alto which have packet capture enabled? I'm trying to see what rules currently collect PCAP and disable the collection of pcap data for noisy signatures.

List NAT tables with static-ip translations

Hello all!

I'd like to compile a list of all my NAT tables for static-ip entries for all my firewalls, I don't know if there's a better way to do it but I'm trying to do it by running the following command on my firewalls and recording the output:

show

Issue starting user in partner portal

Hi Community,

I want to ask you for help! One of our sales Team agent, had an issue when she try to get inside her user portal.

The issue said "Single sing-on error".

Whe want to know how can fix this.

I apprecciate any help!.

Regards,

S

What to monitor via Solarwinds

Hello -

Just looking to see what others monitor for on their Pano/Palo FW within Solarwinds. Is there like a general consensus (best practices) or is it all over the place depending on requirements.

PA3250 in No Rules/Allow All mode and Public IPs

We are currently testing out/learning with a new 3250 in no rules / allow all traffic mode flowing from ISP > Palo > Cisco ASA (Being Retired).

We have two public ips routed to two local static IPs and those have stopped working. Would a policy need

strange behavior of bidirectional NAT

hello All,

Today I've spotted weird behavior:

We have 2 static bidirectional NAT translations between UNTRUST and DMZ interfaces for public IPs. Also we are allowing certain applications in for those public NATed IPs from any IP addresses using only