Policy not matching actual traffic

Hi All,

I have a security rule to allow ip "A" to ssh to ip "B". I can see the traffic actually hitting the fw but it gets dropped with interzone-default. The test policy match also verifies that it matches the traffic.

IP "B" is actually the firewal

Why tcp aged-out?

Hi all,

Our developers are connecting from Zone1 to Zone2 with tcp (on ports between 2000 and 3000)

The tcp session timeout on firewall is 3 hours.

The security policy allows any application, any port from Zone1 to Zone2. But there are all default secur

Global protect Notification

Hi,

When I connect global protect Gateway. Once is connected I received this notification.

I have check the internet connectivity it's working fine.

Can you please let me know how to avoid this notification 

Need help with logging in case of App-Id

Hi,

I have below rule in my Palo Alto and another default rules which are Intra-zone and Inter-zone.

Source: 10.0.0.0/8

Source Zone: Trust

Destination: Any

Destination Zone: Untrust

Application: ssl, web-browsing, dns, Facebook-base, YouTube-base, etc

Serv

Site to Site tunnel between PA and SonicWall or Sangfor

My friend asking me on how to configure Site to Site tunnel between PA and Sonicwall or Sangfor

The diagram like this
SITEA
LAN1 10.0.1.0/24
LAN2 10.0.2.0/24
SITEB
LAN1 20.0.1.0/24
LAN2 20.0.2.0/24

Could anyone gimme some docs?
tq

GlobalProtect and RDP

Hi All,

I have made a change to our GlobalProtect app config to cater for RDP connections by amending the "User Switch Tunnel Rename Timeout" value to 60 seconds. 

I was hoping to be able to confirm this setting had been applied to the GP clients via

Vcenter Plugin for Panorama Usage?

How many of you are actively using this plugin in production networks?  If you wouldn't mind sharing how large is your org?

How to add static routes on panorama M-600

Hello ,

We have M-600 Panorama device and we need to get 2 seperate networks :

MGT : for firewalls administration and to receiving logs ( this network is isolated from internet)

Ethernet 1/2 : a new interface just to make panorama reach internet for up

opcmdhistory log missing in PanOS9.1

I noticed that the “opcmdhistory” log disappeared in Panorama after upgrading to PanOS9.1.It was there in 9.0 and previous  versions.

Do you know why it changed and if the information is in another log file? I was using it for troubleshooting and det

Min. required PAN-OS version on Firewalls with PANORAMA 9.1

Hi,

I found the knowledge base article which PAN-OS versions are compatible to which PANORAMA version.

For the newer PANORAMA 9.1 the informations are missing which PAN-OS versions are supported.

https://knowledgebase.paloaltonetworks.com/KCSArticl