General Topics

Deploy GlobalProtect pkg to Mac devices via Microsoft Intune

Has anyone had success deploying the GlobalProtect.pkg (5.2.9-35) to Mac devices via Intune? I upload the pkg file to Intune and assign the app. It successfully installs GlobalProtect but it then runs the uninstaller as well, removing GlobalProtect f

L2TP over IPSec PAN-OS 8.1.11

L2TP over PAN-OS 8.1.11 with
IPSec is supported in PAN-OS 8.1.11?

When I check the traffic log, the reason for session termination is "aged-out" and I am unable to make a VPN connection.

I have Virtual Wire set up, but I would like to know if anyo

Can we continue to check domain and antivirus if GP license expired

In Global Protect HIP check we have allowed only specific domain machine and specific antivirus. Firewall will continue to check domain and antivirus if Global Protect license is expired ?

Any impact if GP license expired ? Do we require to remove HI

GlobalProtect Silent Install

We are currently in the stages of switching over our equipment to palo alto. In preparation, we are installing the global protect app on all machines ahead of the migration. I've got a silent install setup, but once it completes, I get a connection f

OpenVPN support on Palo gateways?

Palo gateways have supported ipsec site to site vpn for a long time. Do they also support acting as an OpenVPN gateway? I dont mean openvpn passthrough to a backend. I mean actually being the Openvpn endpoint.

revert but not the config

Is there a way to "revert" via cli?  I don't mean config changes either, I mean like the following places:

1. Network > Interfaces > Ethernet1/1

2. Device > Setup > Management

I'd like to script out reverting these.

We cannot export the metadata, when you are in the FW, in the Global protect section, it does not allow you to enter the IP or the Vsys.

Hello,

We cannot export the metadata, when you are in the FW, in the Global protect section, it does not allow you to enter the IP or the Vsys.

When I select in the Authentication Profile, the profile from which I want to export the data, and I sel

Access denied

Hello Palo Alto Community ,

I have problem in communcating betwen Fire wall and Domain Controller (ldap).Status show me Acces Denied on Server Monitoring,i try change user roles to fix it  , but again show me the same status  Acces Denied .

Please he

Global Protect on IOS Always ON VPN sanity check

I've had a Palo Alto case open for almost 9 months now that appears to have devolved into a finger pointing match between Apple and PAN and I'm going to have to make some decisions here, I don't know if anyone else uses that functionality or not.  Ap

WMI access denied in System Logs but Device > User Identification shows connected on all DC's

Hello,

I've seen on my Palo Alto 3220 system logs dashboard applet a ton of Access Denied messages regarding our domain controllers.  However if I go over to Device > User Identification, all 4 of our DC's there are listed as connected in green.  All