Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Our external email protection provider (Mimecast) provides safe versions of file attachments on incoming emails. There is also a one time link in the email to request that the original file is sent in case of any formatting issues. When the incoming
...
Hi All
I've been battling for the past couple of weeks to get a SIP based telephone system to work through my client's PA-220.
I have the NAT and Security Policies set up correctly to allow the SIP traffic to flow on port 5060. However, the RTP tr
...
Hello,
Does anyone else also have problems to access the windows store when connected with global protect vpn?
Actually the problem really only is the windows store app. Everything else works perfectly (internet access, accessing corporate ressources,
...
After upgrading to the latest version of GlobalProtect, I have been trying to resolve this for days. Here's some additional info:
Problem:
Because of occasional issues with vendor patches, like MS had early this year, (see URL below), very few companies release patches/updates to clients or servers on the day of release. They test the updates first, then release them days or ev
...
Hi,
According to the following note https://live.paloaltonetworks.com/t5/customer-resources/release-plan-for-a-new-app-id-category/ta-p/395753 from the version of apps + threats of 18/5 (8408-6715) we should see the new category "Saas" according to
...
Hello,
i had configured a radius server (freeradius) that work with google_authenticator and active directory. So far this works that way:
- login via Global Protect Client with username and AD Password+OTP (password and OTP in 1 promt)
I need to en
...
Hi,
using an internal Dns server
client makes request for a domain ???.com and cannot get an answer.
from nslookup we see that it cannot resolve the domain.
internal dns server to public dns server rule has a spyware profile.
There is no threat log for t
...
Dear community,
We are trying to push for the first time the DG and we get following commit error:
Number of address groups XXX exceeds platform capacity XXX
We followed the suggestions in link down below of disabling "Share Unused Address and Servic
...
Have a site that we want to firewall traffic off into a few segmented zones. I would like to do all of this with 1 management interface, and a single palo alto trunked interface that would carry multiple vlans. To be clear, in this instance, the fi
...
Running version 9.0.12
Moving to a multiple vsys enviroment from a single vsys, we are not running Panorama.
Looking to change all of the address objects in the first vsys to "shared" so the others can access them. Thus far I have not found a way to
...
Hi,
We have configured to download the "wildfire updates" every minute. So whats is the recommended value for this?
Sometimes we face this error, and we are thinking to increase the time for WF updates:
Anyone has reported in cluster Active/Active with asymmetric routing this behaviour?
When a commit is done, we detect several ICMPs lost through this FW.
Hi,
I got the following scenario.
client -> Paloalto -> Server:1234
The client initiates a tcp session to server always using the same source port and same sequence number (verified in packet capture). The session time out is the default 60 minutes.
The
...
I have 2 Palo Alto Firewalls each connecting to Peplink Balance 310x routers. HA is configured between the two Balance 310x routers. What I am trying to achieve is communication between these 2 routers via the 2 FWs. The HA (VRRP) interface is in the
...
TomYoung
on:
Confused about QoS on Palo, need some assistance.
TomYoung
on:
Static Port Address Translation question
TomYoung
on:
what is the cli command for checking last failover
reaper
on:
SSL inbound inspection certificate issue
TomYoung
on:
One Global Protect Portal and Two Global Protect Gateways in One Firewall
