Resolved! How to make Eth Interface gray

Hello,

For testing purpose, I added VR and Zone to Eth Interface1/3. I have removed everything from it but in the Dashboard it shows Red color. This creates confusion as some think the interface is down even though nothing is connected to it. 

Is ther

Resolved! Decryption issue

We have outbound decryption working but there are few sites that popup that donot work from time to time and have to add the to exceptions.

I am trying to investigate a recently highlighted website and to learn how to troubleshoot this better.

If I r

Resolved! QOS per device

Is there a way to limit /throttle qos per device?  Outside of making a QOS rule per subnet or ip host?  I know on some platforms there is a way you can limit every client to a max of 500kb/s per device.   Is there any easy way to do this with the fir

Resolved! Migrate from PA-500 to PA-220

Hi All,

We are planning to migrate from PA-500 to PA-220, and there are some concerns to verify.

Here are our current versions.  My concerns are,

1) How we can match the OS/Content versions with the new PA-220?

2) What will be the migration procedure

Resolved! IPSec Tunnel with NAT configuration

Hello Experts,

I am new to PA and trying to understand how below can be achieved. I am trying to set up IPSec tunnel between checkpoint and PA.

Diag:

I want to establish a IPSec tunnel between CP and PA. On PA side i have 172.16.0.0/24(inside zone) pr

Resolved! IPSEC vpn between cisco 2900 and PAN

Hi everyone, 

I'm trying to setup a route based IPSEC tunnel between my PAN 3020 and Cisco 2900 router.  I'm getting a parameter mismatch on on the ipsec lifesize parameter and don't know how to fix it.

The Cisco peer appears to be wanting a lifesize

Resolved! Warnings DNS Security

Hello team,

I have cluster active-pasive PA-820 version 10.1.0

When I make a commit I recibe this alert " Warning: No Valid DNS Security License"

Someone helps me?

Regards

Resolved! Active directory OU as selection for users security policy

Hello all

I am new in Palo Alto devices and PanOS, so here is my questions.

Is there a way to select an active directory OU as a source user in a security policy?

(Or something else to manage it)

Working with Forcepoint they apply policies to a whole OU