AD DNS Zone with A Record not resolving through GlobalProtect VPN gw

We are using Active Directory for our internal corp DNS.  I am connected to the corp network using GlobalProtect VPN (multi-gateway).  I'm able to resolve names in our primary DNS zone across the VPN tunnel.  I just added a new zone, which overrides

PALO ALTO PA-850

Hi Every one I want to buy Paloalto PA-850 without license service.what features i can avail freely without any license. can any one help me that to list it.

will be waiting for your reply.

how to block apps mobile legends in security policy

Hi, 

I would like to block mobile legends app in the PA-5250. Can I block mobile legend using signature app? 

Thank You

Logging Bittorrent File_Names

Probably a bit of weird question this one, but as the Evil Firewall Admin at an academic institution I sometimes get asked weird questions so I thought I'd pass the joy onwards. We have a researcher who is interested in data on piracy, and I thought

ipsec vpn both primary and secondary both firewall tunnels are up

passive firewall
Active firewall.
===============================================
we did failover from secondary firewall to primary.
After failover Primary firewall all vpn tunnels came up and On passive firewall tunnel info up.
is it normal behavior on

DNS queries to resolve internal hosts from PA managment IP

Hi Community,

I can see my firewall is sending DNS requests ( request for A record) to resolve some of internal hostnames.

• I dont have GP/detect internal host configured
• I dont have FQDN objects with these hostnames
• I have exported and checked entire co

Forward traffic inspection in Palo alto

Palo Alto and Fortinet are configured as internet edge firewalls.

Dual layers FA Internet ---- Palo Alto ------- Fortigate -------- Trust zone.

Outbound traffic is SSL inspected by a Fortinet firewall and the firewall acts as a forward proxy.  All use

URL Category mapping - Bluecoat to BrightCloud

Hi,

Could we have URL Category Mapping Between Bluecoat Content filter and BrightCloud. This would be required and useful for us to migrate from Bluecoat to Brightcloud filtering.

Rgds,

Tauseef Ahmed.

AWS VPN Tunnel and Path Monitoring

I have 2 AWS instances(Prod and Stage) each with redundant VPN tunnels to the same remote end Palo.  I setup path monitoring for each so that when one tunnel is down, the route is removed and the backup route is put in the FIB.  This only works with