VPN Encryption/Authentication key's for Wireshark Decryption

It is possible to debug ESP packet's in Wireshark but to do so I will need to obtain the encryption key and the authentication key for the given VPN from my Palo Alto 5050. As an example - In Linux it's possible to get this information by running the

Best or recommended way to connect PA to Windows Domain

What is the recommended way to connect a PA box to a windows domain?

I see know there is a radius way of doing it, and i know this is the way other like to configure it.

But there is alot more work configuring, and reconfiguring if i want to change/add

Active/Active HA3 issue

Hi all,

I have a client which run a stretched active/active HA cluster with a dark fiber between them. So HA1, HA2, HA3 links are not really cables, but layer2 VLANs. It seems fine, as it has somehow worked a long time, but this is what I’ve noti

Global Protect Portal or Gateway changing user-id format when forwarding to RADIUS

Here you are the scenario:

- PA-500 running PANOS 4.1.7 and acting both as GP Portal and Gateway

- authentication request is forwarded to a Cisco ACS RADIUS server, i.e. PA-500 is its RADIUS client

- RAS login is the full mail address of the users, e.g.