HA4 Clustering to present a single NAT IP across two Data Centres

Can anyone who is using the HA4 cluster in production, to present the same external NAT IP across 2 data centers give any advice on how they are doing the routing.  I saw in the docs that some of the security functions don't work if the traffic is as

Captive portal asking credential for known users

Captive portal asking credential for known users, what is the solution

Wildfire Events "failed to establish or resume a secure session"

Hello

I Have a Cluster active-passive PA-820 version 10.0.7

I am receiving the following system events continuously

I have configured eu.wildfire.paloaltonetworks.com and wildfire.paloaltonetworks.com but the problem persists.

Can someone help me?

Connect to globalprotect vpn using verizon mifi

Can you use a verizon mifi to connect to a globalprotect vpn tunnel? This is so they don't have to install the gp client on their pc. We do not have licensing for gp to be used on phones and to me a mifi is kind of a glorified phone. 

GP 5.2.5 Error authentication check failed

Hi Team,

We have GP 5.2.5 on PAN OS 9.1.7

Connection method is pre logon then on demand.

on GP Gui logs i see error  Error authentication check failed  for  ( eventid eq gateway-hip-check )

Even though we do not have hip check enabled on the GP.

Is this

Url filtering

When user asks for providing full access what categories needed to b allowed & Blocked in URL filtering ?

DP 100%

Hi Team,

We came across a situation that our DP had just gone high at a time point till 100%. I checked with the system files and found some crashes have attached the screenshot for your reference.

Also all the software status where running which i c

Device Config or Full Config

Hello ,

I need duplicate FW config...

What is your suggestion?

Should I import the full configuration file or the device state file?

What is the difference of upload full configuration file or the device state?

Regards

Configure Secondary ILL ISP

Hey, Guys, one of my customers wants to configure a secondary ISP he change his ISP and Now want to configure the NEW 

ILL(Internet Leased Line) ISP. to the same interface. I configure the Virtual route, NAT and added new ISP Ip but was not able to UP

Migrate Massives URL Category

Good Morning.

I would like to know if there is a way to migrate whitelists created locally from URL Category to Panorama and that these do not affect the policies already created.

Category URLs are many and I would like it to be fast and efficient.

Gree

Palo Alto Expedition Tool - Fortigate Configuration Migration

Dear Team, Need to know how to migrate the Fortigate configuration file to Palo Alto Expedition Tool. Please share if any documentation specific to Fortigate to Palo Alto Migration.