General Topics

External ping to public ip of secondary ISP interface.

I am having issues allowing pings on my secondary ISP interface. I have a dual ISP set up with my main connection a 10gbit connection with ISP1 and a backup 1gbit with ISP2. I am currently using path monitoring for internet failover and I also have a

How to shun/block an IP address for a period of time

I've worked with several traditional IPS in the past and there is always a way to create rules that shun or block a source IP address for some period before automatically resetting.  It is especially useful for stopping automated bots that are just p

PAN-171203 issue and latest 9.0.x releases

Hello everybody,

  as all you know, yesterday (or today, in US) were released updates to all PAN-OS versions addressing some issues, but I really have trouble with the PAN-171203 one. As per the PAN-OS 9.0.14-h3 Addressed Issues page (https://docs.pa

Unable to SSH to Passive firewall, GUI OK

hello everyone,

I lost SSH access to my PA-3020 passive firewall on mgmt. interface.. I can access it via GUI.

for Active Firewall, both SSH and GUI are OK.

I think it happened after I did fixing weak ciphers and keys on mgmt. interface. interface for S

Need help understanding how to setup conditions for Firewalls

As it stands m firewall looks at rules in a sequential sense and applies rules in that way. 

meaning if it reaches a Deny it will immediately cancel a packet (which isn't necessarily bad) but it also means if a rule permits a user to do something inte

Tunnel Monitor with AWS

Hello Everyone

Does Tunnel monitor work PA - AWS IPSec ?

I've heard it will not work, only PA - PA Connection

I'd appreciate it if you could help me !

Thanks !

modify company name

While registering I entered my company name wrong can I edit it 

Configuring QoS on VLAN interface

Hi guys,

We want to apply QoS on our inside zone for downloads, but it's not hitting the QoS Policy, here's our conifg:

• For the Inside Zone (users zone) we have an L2 interface eth1/1 and one VLAN interface linked to the subnet.
• We created a QoS Profile

Destnation NAT by https kindly help

I have one real ip address and I have three web sites. Is it possible to work on them on the same port 443 , and the difference is according to the site address? i asked for NAT Solution in paloalto kindly help