Global protect split tunnel setup

Hi

I have 8.1.5 on the pa and 4.1.11-9 client

I have setup the gateway for video traffic exclusion, and selected 

youtube-streaming

netflix-streaming 

But a simple test shows utube still come over the tunnel address

I want to allow MS Teams t

PA-220 lab licensing

Hi,

I'm looking to purchase a PA-220 lab unit (lab license) for home.  Basically, using it for labbing with my personal internet/internal traffic.  Are there limitations with that device/license,  such as bandwidth limits

Read-Only Superuser by Security Zone

Hello, I hope everyone is staying healthy.

I work at a company that provides ISP services to public schools, each school district is divided in to separate security zones on our Palo and I am trying to see if a read-only user can be created that is a

Access Denied on doc links within Live Community

Maybe it's because I'm new here. BUT, every doc link I click on via a post in the Live Community gives me an 'Access Denied. You do not have sufficient privileges for this resource or its parent to perform this action. Click your browser's Back butto

Traffic takes different routes depending on application

Hi community,

I am facing a weird behavior that is driving me nuts.

I have 2 sites linked by a Leased Line (zone L3-GW-InterDC) and an IPSec tunnel (zone L3-VPN) as a backup. 2 static routes are therefore configured, with different weight and path moni

Detect ipsec vpn tunnel down with remote palo alto peer

 PA5020/PAN-OS 7.1.10

 I am trying to develop a NAGIOS check to get an alert , when a vpn tunnel between PA's at different locations

is down. So far I have been looking at the ifup-status of the corresponding tunnel interface at the local firewall. I

Default interzone deny rule showing Allow traffic logs.

Default inter zone deny rule showing Allow traffic logs.

There are expected deny logs but some requests are getting allowed by hitting default interzone deny rule.

Very Strange behavior and we have already verified the Rule and its actions, it is conf

Unable to connect to pool.ntp.org

Hi

I have a problem with the NTP sync. When i make a "show ntp"

NTP state:
NTP not synched, using local clock
NTP server: asia.pool.ntp.org
status: rejected
reachable: no
authentication-type: none
NTP server: pool.ntp.org
status: rejected
reachable: no
authent

shared folder in clientless VPN

Dears,

Is it possible to configure the shared folder in clientless VPN?

Example:- I have one file server and i want to give access to users via clientless VPN. please share any documents for configuration.

Minemeld client cert error

I am trying to use Minemeld for indicator sharing and am receiving and error that says "client cert required and not set, polling closed". Where and how do I upload the cert? Do I have to insert it somewhere in the config? Any help would be appreciat