Resolved! PCNSE7 or PCNSE??

Hi folks,

I am prepping the Palo Alto series exam to grab the piece of certification. However, i searched the internet and found there are two exam options which are seemingly pretty resemble: 1.PCNSE 2.PCNSE7. What is the actual difference between t

Resolved! About DIPP Translated Address type (SNAT)

Hello, 

I have a question related to the DIPP translation. I understand de DIPP Interface. Many IP addresses can use the same IP. But I need to translate internal IP addresses to one specific IP different from the Outside Interface. If I use the DIPP

Resolved! GlobalProtect Client issues on MacOS Catalina

I'm trying to configure GP Client on a MacOS Catalina (10.15.3) to connect via VPN using PKI certificates. I'm using GP version 5.1.1 (also I've tried with 5.0.6). The problem is that it does not prompt me to select my client certificate and eventual

Resolved! Equal Cost Multiple Path (ECMP) - Limit 4 (PA-5220)

Hi All,

I need your inputs here. I have a client using ECMP (4 Links.) and they recently procured another ISP making it 5. Based on the documentation of Palo Alto Networks, the max ECMP is 4. Is there any other work around to make ECMP 5 or utilize t

Resolved! do we require downtime to add additional hard disk for logging in PA VM FW

We want to add additional hard disk for logging in PA VM-500.

What is the maximum limit for hard disk size?

Do we require to shutdown the PA VM Firewall while adding new hard disk ?

Resolved! SSL inbound inspection cert

Might be silly question, For inbound inspection does the cert has to be a CA.

We use a wildcart so that will have to imported as CA, correct?

Resolved! Panorama IP Variable set to none/null possible?

I'm pretty sure this isn't supported and I haven't been able to get this to work.  I am attempting to use a single network interface template for multiple sites.  Some use 30 sub-interfaces and some may only use 3.  I want to push every sub-interface

Resolved! SSL Inspection fails even after Intermediate CA imported

I have imported the intermediate CA, from 'Sectigo RSA Domain Validation Secure Server CA' and root CA 'USERTrust RSA Certification Authority' is already there on firewall default, but still outbound decryption fails.

https://nvdpl.ca