General Topics

Resolved! Allow single user to bypass MFA

Hi All,

I would like to access Global Protect for myself using different profile to access one of our resources subnet 10.21.xx.xx.

I want to access without having to go through 2FA. Any idea for it? is it possible?

Do we need to create another gatew

Resolved! SSL Decryption for IoT devices

I am rolling out SSL Decryption for the wired subnets at my office. It's working great for the users since their laptops and devices are on the domain and trust our private CA which is used as the forward-trust cert. I'm running into issues with othe

Resolved! Transfer Configuration from PA-3020 to PA-850 Without Panorama

Has anyone cloned configuration from a PA-3020 HA pair in active/passive mode to PA-850's that aren't managed by Panorama? Maybe not those specific model numbers even? I'm not familiar with Panorama, and have searched here, and online but all I find

Resolved! Application Override Question

Hi All,

I got this question from the learning center for the PCNSE practice exam. Dont know if its allowed to post the screenshot here.

From my understanding of using the application override, the firewall stops any further content inspection. It wa

Resolved! VPN Issue on interface subnet change

Hi All,

Help here will be appreciated.

I am migrating a pair of PA-5220's to Active-Passive as they are currently Active-Active. First job in the task is to change the interfaces from /30 to /29 subnets. This is to ensure that both firewalls sit withi

Resolved! Allow a more specific path of a Blocked URL

Hi All,

I'm trying to determine if this is possible.

We are blocking abc.company.com via an entry in a custom url category which is applied to the internet policy via a URL filtering profile.

I need to allow abc.company.com/specificpath while still b

Resolved! Configure DHCP reservation on Global Protect user

Hello Community,

Is there a way on the PALO ALTO that we can do DHCP reservation while using the Global protect client VPN.

As of now we don't have any DHCP relay on the PALO ALTO. The PALO ALTO is the one providing IP address for the global protect u

Resolved! Whitelist Java Traffic

Good morning,

I am relatively new to the PA's, but was wondering if there was a way to have a list of URL's & domains to whitelist Java traffic & block everything else?  And if so, can I then write any kind of regex to match specific java versions, sa