Palo Alto troubleshooting tool for IPsec

Hello

I established an Ipsec tunnel (policy based) between palo Alto and Cisco FW.

phase 1 & phase 2 are up and running but trying to transfer data, fail.

Capture packet (merge recieved and transmit) shown

Source : SYN

Dest : SYN ACK

And then Dest :  retr

How to check what zone a subnet belongs to?

Is there anyway to check what zone a subnet belongs in if there are multiple zones on the firewall?

Preferably through the GUI?

macOS Big Sur 11.6.2 - Global Protect 5.2.8-23 - Connected but Internet is not actually working

tcp ping from a firewall command line?

From the command line of a next generation firewall i can use 'ping host blah'.  Does the CLI have a command to ping a destination via TCP?  Or some other tool to do the same?

Blocking Torch browser

Hi All,

I would really appreciate if some one can help me on this.

I am planning to block Torch browser through a firewall rule, using App-ID. But as per information in the community we cannot entirely block the functionality of Torch browser using A

Log Forwarding

Hello everyone,

Before the question, the context.

I have a panorama wich managed a lot of devices groups. we have a lot of rules for them. Which all these rules uses the default profile for log forwarding.
I have a new syslog server and i need to forwa

Custom Vulnerability Signature to block older versions of Chrome

After reviewing this KB article: 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSOCA0

It looks like you can create custom vulnerability signatures for named browsers. 

Could you also do that to limit browser access via a

Match next line at cli

Is there a way to match the next "X" number of lines when piping to match at the cli?

I am entering:

show zone-protection zone outside | match udp

and would like to show the matched line and the next three.

This would be analogous to grep -A 3

Cheers!

Zone protection profiles disadvantage or drawback

Hi All

Can anyone tell me the Zone protection profiles disadvantage or drawback

Need example of Configure IPSec VPN with Source NAT

Hello, 

I'm attempting to setup a few remote sites to a Hub site all sites have a Palo Alto 3260 firewall.  All remote sites have the same internal IPs and subnets on the Trusted side and I'm needing to connect all sites using a IPSEC VPN.  I would li