Resolved! SSL Decryption for IoT devices

I am rolling out SSL Decryption for the wired subnets at my office. It's working great for the users since their laptops and devices are on the domain and trust our private CA which is used as the forward-trust cert. I'm running into issues with othe

Resolved! Transfer Configuration from PA-3020 to PA-850 Without Panorama

Has anyone cloned configuration from a PA-3020 HA pair in active/passive mode to PA-850's that aren't managed by Panorama? Maybe not those specific model numbers even? I'm not familiar with Panorama, and have searched here, and online but all I find

Resolved! Application Override Question

Hi All,

I got this question from the learning center for the PCNSE practice exam. Dont know if its allowed to post the screenshot here.

From my understanding of using the application override, the firewall stops any further content inspection. It wa

Resolved! VPN Issue on interface subnet change

Hi All,

Help here will be appreciated.

I am migrating a pair of PA-5220's to Active-Passive as they are currently Active-Active. First job in the task is to change the interfaces from /30 to /29 subnets. This is to ensure that both firewalls sit withi

Resolved! Allow a more specific path of a Blocked URL

Hi All,

I'm trying to determine if this is possible.

We are blocking abc.company.com via an entry in a custom url category which is applied to the internet policy via a URL filtering profile.

I need to allow abc.company.com/specificpath while still b

Resolved! Configure DHCP reservation on Global Protect user

Hello Community,

Is there a way on the PALO ALTO that we can do DHCP reservation while using the Global protect client VPN.

As of now we don't have any DHCP relay on the PALO ALTO. The PALO ALTO is the one providing IP address for the global protect u

Resolved! Whitelist Java Traffic

Good morning,

I am relatively new to the PA's, but was wondering if there was a way to have a list of URL's & domains to whitelist Java traffic & block everything else?  And if so, can I then write any kind of regex to match specific java versions, sa

Resolved! Multiple Virtual Wires - PA Firewall - TP (IPS)

Hi,

I hope it works but looking for confirmation.

In PAN-OS with PA-5450, can we have multiple virtual wires configured e.g. 3 pair of interfaces configured as 3 virtual wires.

Use case is PA NGFW deployment as inline IPS protecting 3 separate segmen

Resolved! Meraki VPN Registry Traffic Not Visible in Traffic Logs But Can See in Session Browser

I am running the PAN as a vWire and trying to send traffic to
Meraki VPN Registry at port 9350. Why does this traffic show up in Session

Browser but not in Traffic Logs?