General Topics

Panorama is dropping lot of traffic to syslog splunk

I have a active-standby panorama cluster version 8.1.17 that manages about 40 firewalls.  The active-cluster panorama is also a log collector-group.

20 firewalls send traffic/threat/URL logs to active panorama and the other 20 firewalls send traffic/t

Facing issue with SSL VPN with Particular ubuntu machine(Linux)

Dear Friends,

Hope you are all doing good!!!

I am facing issue SSL VPN for particular ubuntu 14.0 user.

Here is my findings and observation below:

================================

++ Customer having 4 diff ISP provider

++ The user was in full tunnel mo

GlobalProtect & SCCM

Long story short, we purchased GP and configured rules etc to allow SCCM traffic to and from VPN clients who are users working from Home.

We are struggling to release applications or updates to these users and would like to know if anyone has GP with

GlobalProtect MTU Size

Hi All,

I have an issue where GlobalProtect VPN clients are enable to establish a VPN tunnel when connected to a certain WiFi network. We have narrowed the issue down to the MTU size. 

Ther are various GRE tunnels and IPSEC tunnels which have reduced

PAN-OS SDWAN tunnel failover

Hi All,

  I have recently setup a SD-WAN between 2 PA firewalls. a default route was created automatically to sdwan.1. Though when one of the interface failed, it is not able to failover to the remaining tunnel which mapped to sdwan.2. May I know if

Google-meet troubles

Good morning community,

I have problems to configure an access policy from the internal user network to the google-meet video conferencing service, users report that they do not listen to or view the video.

When leaving the policy to any destination I

FQDN exclusion Global Protect enforce connection

Is it possible to FQDN exclude  your local domain *.localdomain  when enforcing network Global Protect connection?   Could this be used as a workaround for not having pre-logon configured?  

How/why is there not a enforce global protect connection on

Device in Not Ready state after loading the build

Device stays in Not Ready state for long time. Auto commit also failing. Could someone help please. Is there a CLI to resolve this issue. I found one, but couldn't recall it now.

Microsoft Exchange Server 0-Day vulnerabilities - Share your thoughts

Hi all, if you haven't lived under a rock for the past week, I'm sure you've heard about the 0-day MSExchange vulnerabilities. We want to let you know that Palo Alto Networks has you covered and wanted to make sure you have all the information you ne