General Topics

difference between nego-fail and lacp-up event

Multiple logs are generated for LACP on passive firewall , but not sure whether this event generated due to layer 1 issue or config issue at switch end. We never faced this king of issue , this log are generated all of a sudden on passive firewall. 

L

Expressway-E and C and NAT

I am putting in a Jabber system using Expressway-E and C. My Expressway-E server is NAT'd through the PA-3020 and I have a security rule set up to allow the required ports in on the Public address. If I make a call IN from an external Jabber client i

Active-Passive Cluster Link & Path Monitoring

Hi All, 

Referring my prior discussion Subject - "Firmware Updation A-P" , We have below configuration enabled on Link & path monitoring configuration at this moment, have a look on screen shot.

Will this be sufficient to trigger auto failover to Pas

How to allow NTP ONLY to pool.ntp.org

I have a requirement to allow the internal NTP servers to sync with ONLY US.pool.ntp.org.  I have tried creating the rule 2 different ways.

1. Create a address object using FQDN for us.pool.ntp.org and use that in the rule destination.
   1. This doesn't work a

Logon Method for mixed users using certificates

Hello ,

I have a requirement ,  Currently both Internal and external users ( both are AD users) connect to GP via their AD user name and Password

Requirement is enroll Machine certificate to Internal Users and a Common Certificate issued by Palo Alto

Log Forwarding Rule/Object

I have a server that connects every 10 minutes to an SFTP server.  I would ideally like to know when it is done for the day.  So I setup an email server profile and started on a Log Forwarding object.  It does not really have to be a log, just and em

Replace 5050 with 5250

Customer is replacing a 2 pair of 5050's multi-vsys with 2 pair of 5250's. All of the configurations are local to the firewall with the exception of objects which are managed by Panorama. The final plan will be to have Panorama manage the firewalls a

Aruba AP with PAN, User-ID mapping with IP, Syslog Filters

I'm trying to map User-ID to IP in our intranet so that we could easily identify User in PAN Traffic.

We have Aruba APs adn AC authenticating with external Radius Server,  While our PAN is sitting at the gateway.

What i'm trying to do is using Aruba

First time BGP setup VR question

We are about to implement EBGP for the first time. The EBGP will have two peers. The ISP wants it to be used as a primary/secondary rather than equal split. We currently have two ISPs that will be going away. We are a 24/7 shop so we need a strategy