PA L2 interface ARP problem

Hi,

I have a PA with two switches connected to the PA via L2 interface, in trunk. The same switches have a trunk between them.

PA---SW1

|          |

SW2--|

So far so good, STP works and the network is stable. If one of the links between switch and PA f

QOS on tunnel interface

 Hello Bro,

               We are in process to configure QOS rules to control SMB over VPN.

The tunnel interface can't be set as a destination interface, does that mean to use the interface that serving the tunnel?

if I use the interface as the destina

PA3020 Replacement

I am planning to replace my HA pair of 3020 with PA-460s...what are you thoughts on this? I feel like the 460s are for branch offices and not data center although the specs are better or similar to 3020...they don't support LACP and they don't have d

PA-3020 - Error: Threat database handler failed - Commit failed

Hello,

We have a PA-3020 running FW 7.1.24 on an end of life infrastructure to be shutdown by the end of year. This PA-3020 has no longer any subscriptions/support. We are in need to enable a Security Policy for a few hours and found we can't commit d

non digit error on PA 7050

non digit error after commit... please help

2 OSPF process

Dear Community,

I have 2 OSPF process on AsA, now I wont to replace Asa with PA, as I know PA only can run one OSPF process. Is it possible to solved this?

Thank you in advance.

Hiding Global Protect version

Hello ,

for one of our customer , they did some pentest and came back with a report that our Global Protect Portal shows the version of GP

They advised if is it possible to hide GP version info . 

When a user opens the GP Portal , version info is not

PBF Without Gateway

PBG without gateway

Good afternoon, is it possible to configure a PBF, without specifying the gateway IP address, just apply the outgoing interface and that's it? is this possible ?

I remain attentive, thank you very much.

Best regards

2 VM series HA Setup in Azure with ELB

Hi all,

I've setup 2 VM series in a sandwich topology and want to know the following in terms of the setup:

How to configure the 2 virtual routers being trust and untrust for the static routes that point to the ELB?

How to configure the NAT for outboun

Renewing a Subordinate CA Certificate for firewall, issued by MS Server Enterprise CA

Hi,

I've been looking all over for some guidance on this, without much joy.

I am trying to renew a subordinate-CA certificate on a firewall, that was issued by a Windows Server Enterprise CA.

Obviously there is no Renew function on the firewall for t

syslog server logs

Hello,

I am facing an issue to get the alerts for my syslog server ( description contains 'Syslog connection broken to server[\'AF_INET.127.0.0.1:2625.\']' )

every two hours I am getting alerts. i checked the sys-ng.log and took the packet capture bu