Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
We are getting error when configured ipsec tunnel and the error is that "number of entry has exceeded" in proxy id.
PA-5220
OS-9.0.5
For your information please find attached screenshot.
I have an issue where traffic coming in one zone is not being forwarded to the right zone. It seems the destination zone is not being assigned right when the session is setup. It seems to be matching the predefined intrazone policy trust-trust. H
...
My customer has two data centers with GP access.
What is the best way to make this a redundant setup and have the GP client prefer to access the closed DC and fail-over to the other DC, in case the preferred DC becomes unavailable?
Thank you for your
...
I would like to share issues with GlobalProtect, and what was done to fix it.
QoS with loopback interface
Due to high network load on the Internet line, we wanted to priorize (or limit) some traffic. It took several hours (testing, reading documents,
Hello,
Just curious what cables everyone is using for their HSCI qsfp+ for HA2. My vendor wants to sell me a 10m cable, I dont need 33 feet to span less than 1 :(. Just curious what people are doing prior to using a standard port with 10GB gbics.
Chee
...
Dears,
I have 2 ISP lines
link 30Mb
link 20Mb
I need to marge the 2 ISP lines to be 50Mb. I have PA3020
Hi community,
I'm wondering if it is possible to gain access to the below live community link or is this just for Palo Alto Networks employees?
https://live.paloaltonetworks.com/t5/Internal-Knowledge-Base/Designing-Networks-with-Palo-Alto-Networks-Fi
...
Hi,
We are SNMP monitoring the number of users connected by GlobalProtect Gateway. Sometimes we see how the graph goes to 0 and recover the value some minutes later. No issues were reported by users connected by SSL-VPN.
So we are investigating if th
...
Hi Everyone, does anybody has ever implementing multi factor authenticator using Google Authenticator?
Hello,
I tried searching but was surprised to find no ready answers for this.. I'm trying to determine the App-ID policy to explicitly block or allow voice calling over wifi (or wifi calling) on Verizon, AT&T, etc. I can't seem to find this in App-ID'
A GP issue I am dealing with at the moment is where the client will successfully connect but I cannot ping anything on my network. It appears to immediately disconnect. I have attached the log files if anyone may know how to help determine the caus
...
I have an active passive PA850 pair, and want to turn on jumbo frames.
I wondering about the best order-
Can I:
do the passive unit first, and reboot
fail over and do the primary then fail back.
Any issues with the HA function while one unit has jumbo e
...
In AWS I am attempting to use an autoscale template in a transit VPC. I'm running into issues with the NLB and limitations with defining tcp/udp services to load balance. In essence I want to LB the gateway for attached spoke VPC's. The use case is A
...
HIP object is correctly setup.
thumbnails.trvl-media.com used by www.hotels.com to host its images is classified as a high risk site
If this is a false positive, how do I get Palo Alto DNS Service to take a second look or find out why it's classified as high risk?
How are other peo
...
reaper
on:
GlobalProtect Android version 13 issue
reaper
on:
Replacing PA-5220 with a PA-3410 and need the best practice to migrate over configuration
aleksandar.asta
aleksandar.asta
reaper
on:
DNS Security cloud query timeout.
reaper
on:
cli "show" match case insensitive and pipe
