Access Denied on doc links within Live Community

Maybe it's because I'm new here. BUT, every doc link I click on via a post in the Live Community gives me an 'Access Denied. You do not have sufficient privileges for this resource or its parent to perform this action. Click your browser's Back butto

Traffic takes different routes depending on application

Hi community,

I am facing a weird behavior that is driving me nuts.

I have 2 sites linked by a Leased Line (zone L3-GW-InterDC) and an IPSec tunnel (zone L3-VPN) as a backup. 2 static routes are therefore configured, with different weight and path moni

Detect ipsec vpn tunnel down with remote palo alto peer

 PA5020/PAN-OS 7.1.10

 I am trying to develop a NAGIOS check to get an alert , when a vpn tunnel between PA's at different locations

is down. So far I have been looking at the ifup-status of the corresponding tunnel interface at the local firewall. I

Default interzone deny rule showing Allow traffic logs.

Default inter zone deny rule showing Allow traffic logs.

There are expected deny logs but some requests are getting allowed by hitting default interzone deny rule.

Very Strange behavior and we have already verified the Rule and its actions, it is conf

Unable to connect to pool.ntp.org

Hi

I have a problem with the NTP sync. When i make a "show ntp"

NTP state:
NTP not synched, using local clock
NTP server: asia.pool.ntp.org
status: rejected
reachable: no
authentication-type: none
NTP server: pool.ntp.org
status: rejected
reachable: no
authent

shared folder in clientless VPN

Dears,

Is it possible to configure the shared folder in clientless VPN?

Example:- I have one file server and i want to give access to users via clientless VPN. please share any documents for configuration.

Palo Alto PA-3020 Won't Boot

I have a Palo Alto PA-3020 that I got from work a few months back, it was pulled in working condition a few weeks ago, but when I power the unit on the power LED lights up and the fans spin, but no other lights are on. I tried connecting to the unit

add new local log collector in collector group

We are using standalone M-200 for 5 locations firewall and created collector group with single local log collector of M200.

We are deploying our new M-200 at another location and it will be in HA with our existing M-200.

This new M-200 will be Active-

Layer 2 sub interface with vlan is not working

Hi all,

I am trying to configure palto interface in layer 2 mode as trunk and Vlan interface as SVI.

Interface             interface type             IP address              Tag                Vlan         Sucurity zone

ethernet 1/10      layer2