URL wildcard Pattern

Hello everyone, I need to block URLs that have a word pattern/string, It is possible to restrict certain strings inside the name of a URL?? for example the word "good" inside the website "www.goodwill.com" to be blocked ? I already try with Wildcards, any ideas on how to achive this ? block keywords for web browsing is this possible and how to d...

Data copying over Global protect VPN

Hello, I have one query:-If, I am connected with GP VPN and. I want to prevent the users can not copy files or data from the shared folder and server.is it possible?

Destination NAT for Route base VPN

We have an requirement to set up a route base VPN, but remote proxy IP subnet clash with an existing remote subnet. We are planning to use destination NAT, but not sure, how the routing will be controlled. Please help to solve this problem.

Palo alto routing query

Incompatibility Acrobat-GlobalProtect

Hi, Customer upgrade Adobe to versión 21.001.20135 and Global Protect stopped working. Issue is th esame like this:https://community.adobe.com/t5/acrobat/adobe-acrobat-reader-21-001-20135-preventing-users-to-connect-to-global-protect/td-p/11823885?profile.language=es Do you know if there is anything to do in Global Protect for this?

SSL Inbound Decryption Failing

hello, we are setting up SSL Inspection for inbound traffic but it is failing when clients try to access, we are getting unsupported protocol errors. ssl labs shows the following issues around handshaking. with SSL Inspection off we do not see these errors can anyone advise what we can do to address this? we are running PAN OS 9.0 Thanks Ryan

Panorama<->Firewalls connectivity issue

Hi all, After I modify the route service and restore it to the state before the firewalls (2 HA firewalls + PA220 ) are no longer connected to the panorama. No changes are made on the network side between the two.Panorama : VM (VMware ESXi) version 8.1.17Firewall: 2 HA FW version 8.1.17 and PA220 8.0.17Changing the IP address of panorama in the...

URL Filtering Issue Through GlobalProtect

We are facing a issue in URL Filtering while connecting Palo Alto PA-220 via Globalprotect. When I am using broadband connection to connect to my laptop to vpn then all the configured url filtering sites are getting blocked but when we connect it through mobile internet connection then only facebook and instagram is opening. While we can get tho...

Static group, that has 2 dynamic groups as members, used in decryption policy?

I have a static group with 2 dynamic groups as its members, that is in turn used as the source object in a no-decrypt rule. I have discovered that this does not work; decrypt still happens. However If I use the dynamic groups directly as sources in the no-decrypt rule it works as expected. This same static group DOES work fine in the security po...

External Certificate Renewal

I can't for the life of me figure out the process to renew a certificate issued from an external CA. We have a cert purchased from Thawte for our Global Protect gateway. It will expire shortly and Thawte wants a csr file for the renewal. Selecting renew in the Certificates tab only allows me to select how many days, which is not helpful. I h...

can we generate report for tunnel interface in ACC

We are using proxy solution for url filtering for which we have deployed ipsec tunnel with cloud proxy server.If we are filtering ACC report for interface and zone we are not able to get proper utilization report. Hence we are trying to export report for tunnel interface as we can see in pan chrome tunnel interface runtime bandwidth is 30 mb upl...

LIVEcommunity January Rewind

Hi everyone! We are excited to share our first LIVEcommunity monthly recap with all of you! There are a lot of exciting things happening around the community, so we put together this News article sharing everything that you might have missed during the month of January. Check it out here. As always, we are open to hearing your thoughts an...