General Topics

Shadow Rule Warning after upgrade

Hi All, 

We have a customer who has upgraded to 9.0 and they get shadow rule warnings since the upgrade.

All the shadowing rules are more generic with any/any for source and destination, but with source user restrictions.

The shadowed rules have more

Saml IDP certificate.

Hi Team,

We need to integrate Saml With Global Protect .We have done the saml configuration in azure perfectly fine.We have exported the metadata file from azure and inported in PA NGFW successfully.We need to achieve through IDP certifcate but the i

Global protect client stuck on connecting

Hi All - Global protect client for a few users is stuck on connecting state, is anyone able to help me look into

P 865-T24627 Mar 05 07:15:48:180208 Info ( 495): Server is trusted ***.gpcloudservice.com(0.0.0.0)
P 865-T19203 Mar 05 07:15:48:445236 Inf

WildFire Analysis Exclusions? smbv3

Seeing a lot of false positives with WildFire for application ms-ds-smbv3, specifically for PE+MSDOCX files. Is there anyway to just exclude ONLY this application from our Wildfire? I'd really hate to have to create a 2nd WildFire Security Profile an

NMAP Scan, PA show open ports

Hello experts!

When I scan my firewall from the internet no matter what I try I still get this.. 

Generate a Global Protect user report

hi there,

I have seen a few posts on this issue. but for some reason, I was unable to see the steps on how to do it.
I simply want to generate a daily report that will tell me how many users connected through global protect in the workday.
if someone ca

Multiple TAXII outputs within a single minemeld instance?

Hi,

If I have a configuration of 2 taxii outputs within a node, the output feed discovery service url for both taxii output nodes are the same, in this case, how do we differentiate them? Would authentication with Tags helps? Thanks!

IPSec tunnel between PA-220 and VM300 in Azure

Trying to build a IPSec tunnel between a lab PA220 and a VM300 we have in operation in an Azure environment.  I think I've got all the necessary ingredients covered, and I've checked all the "How To" docs I can find, but still no luck.

Are there any

GlobalProtect 2FA

Hi,

PaloAlto VM-100 8.0.13

I've been trying to add 2FA to our GlobalProtect Gateway. I've followed the instructions described here: https://www.paloaltonetworks.com/documentation/80/globalprotect/globalprotect-admin-guide/authentication/set-up-two-fa

Static IP for GP User

hey,

i have a requirement from a customer for some users to always have the same ip when they connect to the VPN for example if the IP Pool for the GP clients is: 192.168.x.110 where x will be 10-15 depends on which GP GW you are connected to.

i have