GlobalProtect and "client sleep mode"

Hello,

as described in the "GlobalProtect 1.1.6: Addressed Issues" (issue point 35361) the unnecessarily reconnection after sleep/hibernate mode should be fixed.

We are using the GlobalProtect Version 1.1.7 . The portal configuration are:"On demand" mo

Is there a community edition of PAN OS?

I am looking for a legal copy of PAN-OS OVA is there a way I can download?

Global Protect HIP Check - Defender ATP

Hi, we're implementing Defender ATP as an anti-malware solution.

I would like HIP checks to restrict Global Protect connections from clients without a recent AV scan performed, without Real Time Protection Enabled or with out-of-date virus definition

Bypassing "Packets dropped: forwarded to different zone" limitation

Dear community!

I´d like to consult with you for a possible solution for this scenario:

We have 2 internet lines from two interfaces of the PAN firewall connected to two different routers. Each interface is in a different zone.

When incoming and return

Licenses on Airgapped Panorama

Hi guys,

I was wondering if anyone has any experience using a totally airgapped panorama/firewalls deployment.
At the moment I have a case where none of the devices are allowed any outside connections.

I thought it would be do-able since both software

How to configure FQDN

IPv4 Processor receive cidr and output single address

Hi folks, 

Actually I can create a miner that pull an IPv4 list, send it to the processor and to the output. The output is always in that format:

1.1.1.1-1.1.1.1 (for an entry in the list with a single ip)

2.2.2.0-2.2.2.255 (for an entry with a s

TCP reset packets being dropped

Hello Everyone,

I have TCP reset packets being dropped in the Palo when they are sent from tcp-rst-from-server or tcp-rst-from-client. I've taken a pcap to verify the traffic is being dropped. I've put in a ticket with support and their solution was

Spurious hits from the Expanse webcrawler...

Much the same as the issue in this post: https://live.paloaltonetworks.com/t5/general-topics/incoming-traffic-from-palo-alto-ip-address/td-p/196099 only with a different set of IP addresses (34.77.162.0 - 34.96.130.0).

Telling me that "we crawl on a r

Block chrome specific version

We have an requirement of blocking old chrome version over Palo Alto firewall.
Kindly check for below PA versions and confirm if we can block Chrome User agent below 93 version.