General Topics

How to configure new ISP to make dual ISPs Active Active on single firewall Palo Alto.

Hi All,

How to configure dual ISP with both ISP is active at the same time.

Local user can user both Isp when they using Internet.

How possible ?

PA-200 PAN OS 8.1.8

Thanks. Pls Advise.

Palo Alto OSPF Graceful Restart

Is Palo Alto's OSPF Graceful Restart checkbox on the virtual router roughly equivalent to Cisco's NSF IETF method?

If I do this on a Palo Alto:

And this on a Cisco... Q:Should it work?

1. enable
2. configure terminal
3. router ospf process-id [vrf vpn-name ]
4. n

Comment column for custom url categories?

IP lists for edls have:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/formatting-guidelines-for-an-external-dynamic-list/ip-address-list#idd44a975a-a94a-4398-864e-5cf223f1d351


Is there a way to

Whitelisting a url with 2 different ip address

Just wanting to make sure I am doing this properly so it works how its accurately. I am trying to whitelist 2 different IP's and a single url https address. I am trying to do this for a specific group of users on the firewall are able to access it an

Logs not been sent to dedicated log collector by some firewalls

Hi All,

I have an interesting issue of most of my firewalls not sending logs to the log collector. Have only a 20% success ratio with successful log collection thus far.

I see the below in the below:

Log Collector           : 000710004755

Conn ID    

GlobalProtect agent error message "ERROR_WINHTTP_CLIENT_CERT_NO_ACCESS_PRIVATE_KEY"

Hi all,

I deployed the GP agent and user was authenticated by client certificate, most users wroks, but some users cannot pass the authentication and get the following error messages in PanGPA.log:

(T1356) 06/08/18 13:39:53:722 Info (2559): PanWinht

Proxy-id same local ip difference remote-ip in 2 tunnels

Hi,  

I have 2 IPsec tunnels   same local-IP and difference remote-ip  how we can setup prox-id with 2 tunnels 

SNMP OID for identifying if an power supply had failed or removed from the firewall

Hi Team,

We have an PA-5260 deployed in our environment. 

We need to get alert on our SNMP Manager when the Power supply to the firewall failed or the power supply had been removed from the firewall.

Downloaded the Enterprise MIB file but not able to

Issue with network driver of PAN-OS 10.1.3 deployed in azure

Hi Folks,

We have an PA-VM-100 series firewall deployed in the Azure cloud.

We have three NIC cards mapped to the firewall interfaces which is configured as below:

NIC card 1 <-----> Management interface

NIC Card 2 <----> Untrust interface(Ethernet 1/1

Global Protect Redundancy

Hi,

I would like to set up Global Protect VPN on 2 sites, and have a round robin redundancy between them.

i.e. user1 logs on the GP VPN and connects to site A, then user2 connects to GP VPN and connects to site B, and so on...

Is this possible?

regard