Change HA pair from Active/passive to Active Active

Hi All,

I will be changing one pair of our firewalls from an active/passive pair to an active/active pair. Whilst confident of what is needed and the process I need to take, has anyone ever gone through this process? Was it problematic, time consumin

PBF Issue

Hello, i have palo alto with 2 ISP(A and B) and 1 internal connection

i enabled the ECMP + simetric return and ecmp setting IP Modulo.

my goal is, force 1 IP segment to ISP B to go to the internet

i already setting in PBF, using enforce return simetric

Vpnc client region null

Hi all,

I'm trying to connect to vpn using vpnc.

Everything works fine, but if I restrict the region in the gateway, vpnc does not connect because it is shown as "Client region: (null)"

Any experience on this?

Thanks

User-ID with 802.1x problems wired and wireless

Hi all.

We have PA-820 with 10.1.2 with User-ID Agent on Windows AD runing version 10.0.4-r23 and we are using Cisco switches for users. We have 802.1x enabled on ports for users. The problem we have is, that PA doesn't recognise users from 802.1x, i

Interfaces in power-down state

Hi all...I have a Palo Alto Active/Active pair and the HA3 link between them is down. Will PANOS then power-down all other physical interfaces when the HA3 link is down. Just looking for confirmation that this is expected behaviour or whether I have

Decryption or blocking NordVPN

Is it possible for Palo Alto Firewall to decrypt third party VPN agent traffic such as NordVPN, NordLynx like decrypt HTTPS web-browsing traffic?

If it cannot decrypt these traffic, anyone know the App-ID for NordVPN, NordLynx?

I found some VPN app-ID

Url problem

Hello everybody.

I allow a url. I also allowed categories for that url, but the site still doesn't work properly. There is a problem connecting to a server on that site and it is deny

Thanks in advance

Fast DNS Resolution Issues

Hello Community,

I checking to see what everyone is doing for their allow lists for some thing like an S3 bucket. 

Scenario: Lets say my server has no internet access due to policies denying the traffic. I then create an object, FQDN,  xyz-s3.amazo