General Topics

Zone Protection - Reconnaissance

Hi,

Are there any best practice settings for the reconnaissance portion of the zone protection profile.

I see the default has the below.  Is it recommended to leave as defaults or does someone have a better recommendation?

TCP Port scan 100 events wi

GP Split Tunnel with Microsoft O365/Microsoft Teams & GP License

Hello All,

It appears that the large list of IPs and domains to completely enable split-tunneling with GP for O365 & Microsoft Teams requires the GP license to facilitate defining domain names in addition to IP networks (which I understand works with

Can URL Profiles be used if there is No URL Filtering License?

Can i use URL filtering using custom URL categorys if i do not have a URL filtering license.?

when i try i get the following warning message.

No valid URL filtering license,

Can't connect firewall to network

I'm trying to setup a PA-220 for the first time. I'm able to access the fw via the web interface when I directly connect my laptop to the mgmt port. 

I'm stuck on Step 11 (https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/getting-started/inte

Unable to disconnect Global Protect in Linux machine

Hi Team,

I have configured GP using "On demand" method when I tried to disconnect GP by ran the command (

"Disconnect on ideal" not working - Global protect

We have set Disconnect on ideal for 20 min and we have tried to log off from the PC and login after 20 mins and GP is still connected,what could be the issue.

Inactivity logout seems to work after 2 hours

Palo version 8.1.13

GP- 5.1.1

which answer is right?

A company needs to preconfigure firewalls to be sent to remote sites with the least amount
of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data center

GP VPN having some issue with Okta authentication

Does anyone else having below issue with the Okta CDN?  Screenshot has been attached for reference.

authentication sequence with LDAP and SAML

Hi Community,

I have a requirement to have client authentication in globalprotect portal/gateway to have with LDAP first then another profile wich is SAML based. the requirement is to authenticate with SAML profile if LDAP auth fails. But as SAML pro

Normalize UIA mappings 8.1.12

Hello,

 I've searched and found a few posts but I can't seem to find the solution; prior to 8.1 UIA, all users shows up in UIA as domain\username.  Since installation of UIA 8.1.12, it's a mix of domain\username and username@domain.  It seems that in