Resolved! PBF conflict with "ip strict option" in zoon protection

Hi All

i have a scenario where the traffic works fine if it's forwarded by the routing table (and nat is applied)

when i used pbf, it didn't work, checking global counters i found oacket are dropped and the reason is "strict ip" option in the zone prot

Resolved! Routing between overlapping networks

Hello,

I want to replace our existing firewall with a PA-850. Thereby I have a problem, which I cannot get solved.

I have to route to an external network, which unfortunately uses the same subnet as ours.

Until now, I have used a small Linux VM, which u

Resolved! SCCM management of remote GP Windows clients

We just deployed and started using GlobalProtect 5.1.1 to support the work-from-home COVID-19 initiative for thousands of remote workers.  Everything is working well but my SCCM guys can't manage any of the remote clients to push patches or software

Resolved! route-table unicast appear after adding new prefix in BGP export filter

Hi,

We have an existing BGP peer session to our service provider advertising a few prefixes which has been working fine.  I have recently added a new prefix (/24) which statically routed to our internal switch, all our static routes are redistributed

Resolved! Help with routing decision

Hi

Got BGP providing DGW and I have a static 0.0.0.0/0 with metric 240 so its last resort route

but

VIRTUAL ROUTER: vr_default (id 2)
==========
destination nexthop metric flags age interface next-AS
0.0.0.0/0 0.0.0.0 19 ~
0.0.0.0/0 202.74.32.69 ?B 612028

Resolved! Query About To Increase VM-Firewall Disk Storage Size

Hi Team,

We deployed a VM series firewall in azure and it's in production now. 
Presently the VM-Firewall OS disk storage size is 60GB and there is no Data Disk used. 

Since the customer is need a 6 months of log retention period. 
As customer isn't rea

Resolved! multi lan multi wan best practice

situation is this :

currently i have :

multiple lans/vlans

1 p2p line (single subnet static route0

1 internet line

1 virtual router

now, i need to add another wan

my best practice should be

a : to do another virtual router and separate relevant networks t

Resolved! Vulnerability protection ip exception

We have our regular penetration tests coming up and we need to allow the IP addresses that are doing the testing to scan our network. Is there a way to create an IP based vulnerability protection exception? I know how to create an exception for a spe