Destination NAT & port forwarding not working as expected

in a lab environment, i'm trying to test destination Nat & port forwarding,  i mapped the port 80 to WEB-1 and 8080 to WEB-2.
while testing i can access only WEB-1.
i did another test where i mapped TCP 22 to WEB-2 and 2222 to WEB-1, i can SSH to WEB-2

Block Brave Borwser

Hello,

I have noticed that some of our employees are using a brave browser and can easily open blocked websites like Facebook, crypto, games etc. what's the way to block brave browsers.

Thanks:

Knowledge sharing: Globalprotect troubleshooting/investgation. Split tunnel,Globalprotect app/agent configuration options and etc. to solve issues

Hello to All,

Just as a note I have issues with my old community account, to this is why I am using new one for now (Edit: the issue is fixed but I will keep this article under this profile).

I had to use several options in the split tunel options

CURL ERROR: bind failed with errno 97: Address family not supported by protocol

After the customer upgrades the Firewall to version 9.1.10, the following message appears in the System Log, which is not displayed any more.

CURL ERROR: bind failed with errno 97: Address family not supported by protocol

CURL ERROR: Operation timed

Microsoft always on VPN (Windows 10 clients) through Palo Alto

Hi All,

We have several Windows 10 clients (3rd Party but using our infrastructure) that need to transit through our PA-3260 to their home network via MS always on vpn. Unfortunately this does not work, we have a very open "any-any" rule in place for

PPPOE interface - dynamic IP - GP Portal

When establishing a connection via PPPOE there is no possibility to select the IP ("None") assigned by ISP in the Global Protect portal configuration, only the interface, which is not sufficient for it to work. I would expect that the IP assigned by

Captive portal

Hi Team,

please confirm whether in pan-os 10.0 and later do we require SSL-Decryption for captive portal.

Is SSL-Decryption is mandatory for Captive portal.

How to see uesr-ip mapping in panorama GUI?

I know there is this CLI command "show user ip-user-mapping-mp all" to view all user-ip mapping Just wondering if this info is shown anywhere in GUI

Thanks,

Knowledge sharing: Containers (Docker, etc.), Kubernetes, Openshift, Palo Alto CN series container firewalls

I hope everyone knows about the Palo Alto Beacon training platform as recently I found a great training about the CN series firewalls as we started needing security in our AWS kubernetes cluster. Palo Alto has youtube videos but they are not enough (

Destination Zone

Hello

I found in documentation : "Assign destination zone based on Interface packet would egress from"

What is behind this "would" ? How is choose the destination zone , based on FW topology or routing table or ?

I have set a route (next hop Tunnel i