Resolved! IPSEC ON SECONDARY ADDRESSES

Hello,

just a little question it is possible to terminate a vpn-ipsec with a secondary adresses on external interface or I must use the main interface?

thks,

ALex

Resolved! SSL forward-proxy certificate import

I've gerenated a CSR to give my enterprise CA. Now, I've recieved the enterprise CA-signed certificate ann imported it onto the firewall.

The status reads "valid". The "Key" box is checked, however the "CA" box isn't. 

Also, when I select the certifica

Resolved! Apps and Threats Threshold time

What Threshold times are you guys using, why and has the log4j caused anyone to decrease this time?

Stock photo for example.

Resolved! Is there a command on PAN about same as linux mtr(mytraceroute) command

Hello Community,

Good day

What is the command on PAN for mtr(my traceroute)?

On linux there is a command mtr to show ping and traceroute output.

The only command i see on PAN is traceroute.

The mtr is useful showing how many percent packet loss on a trace

Resolved! GlobalProtect MAC Address Filter?

Hello folks,

I am being asked if GlobalProtect could be locked down to only except a specific list of MAC addresses (our corporate laptops) only.  

I see information about Device Block list or HIP configuration.  I don't really want to specify a bloc

Resolved! Can we check how much RAM PA is using via GUI?

Hi We can check how much CPU that PA is using, but it does not show how much RAM the Palo alto is using. How can we show it at GUI? Thank  you

Resolved! Unable to Commit

I've just changed the configuration of the management ip address, but can't commit the change. When I attempt to submit it I get the following error:

admin@PA-3050# commit

...
ID population failed
Error: id 10630 is outside allowed range [1-3583]
(Module

Resolved! A connection issue between PA and SW

Hi, PA port e1/2 is connected to switch port f1/5(L3). Both devices can see each other's ip and mac address. The Virtual router and Security zone and Magagement profile Ping are configured. but both devices cannot ping each other. Did I miss some ste