ECMP With PBF

Hi,

I have ECMP with PBF configuration for dual ISP.

ECMP using weight 100 on ISP A and 200 ISP B.

PBF rule user A to isp A, user B to ISP B.

default routing to ISP using the same metric

we expect that user A will go to ISP A, but in reality user

Why would what worked in Sophos would not work with PA

Hello everyone,

Trying to make my ubiquity unifi access points with multiple ssid tagged with their  own vlan IDs work with PA. it worked seamlessly with Sophos but can't make it work with PA. 

I have one Ethernet port L3 configured with subnet D

same subnet multiple VRs not working

I am trying to setup SDWAN, however this firewall currently has several Site to Site VPNS which causes an error on deploying site to site vpns. I am trying to setup a second WAN address to be usedonly for SD WAN. Currently my public ip is 2.2.2.2/24 

How configure to receive email when an Importan action is required

Hello,

From my colleague I have received the info about 

Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration

where I need to set and receive that Important Emails? is because I'm the responsi

Receiving too many alerts when a ISP or Tunnel link goes up or down.

Hello.

I have a Palo Alto PA-440

We have enabled path monitoring for our ISPs, with the destination address/monitor IP set to 8.8.8.8. The ping interval is set to 3 seconds, and the ping count is 5.

Additionally, we have configured and enabled system

PA- Security Policy Destination as FQDN issue

Dear Community,

I am facing an issue were the i have post security rule allowing the access to some FortiGuard URLs, on the other hand i am have a default deny rule with reset-both action right above to the interzone & intrazone policies. What actu

Unable to access HTTP & HTTPS

When I switch from passive to active, I can't access the application via http and https. But I can ping and telnet the application via port 443

Split Tunnel - Exclude Client Application

Hello,

I am setting up a new Global Protect gateway.

We previously havent setup Global Protect (GP) before with Split tunnel so this is my first time and its not going smoothly..

i am trying to exclude client applications for some software we use. bei

videoparse.jar detected as Grayware

"videoparse.jar" is detected as Grayware in Wildfire but not found now.

why this was flagged malicious ? 

File hash : 844ccde43fa61803f1643401600e17dced86c60509ee340ae83b332a068f8dcc

VirusTotal - File - 844ccde43fa61803f1643401600e17dced86c60509ee340

[Error]: Failed to create exclude route in Global protect

Hello All,

what could be the issue when user is not able to connect Global protect and we can see [Error]: "Failed to create exclude route" in  pan_gp_event_log.

latency Troubleshooting

We have a load increase following the unblocking of an application's url. How can I troubleshoot for finding what's causing this?

HA Pair - peer version too old

I have two hardware gateways in a HA pair running 9.1.19.  Ive upgraded one to 10.0 and then to 10.1.14.  It now complains that the HA 'peer version is too old' and it has suspended HA.  If i suspend HA on the remaining 9.1 gateway, HA doesnt activat