Why SSL Certificate Is Required In The Gateway When Tunnel Mode Is In IPSEC

Hi Team,

Wants to understand why ssl certficate is required in the gateway when tunnel mode is in IPSEC. Can anyone please provide the in depth connectivity process and justification for the need of SSL certificate on each gateway. 

-

Regards,

Sethupat

Create Custom Report for Unused Rules

Hi

I am struggling a bit here. 

I've been tasked to set up various reports on palo firewall. 

One of them is to create a custom report displaying all unused rules. 

I've tried many things. I followed this link: https://knowledgebase.paloaltonetworks.com/

Panorama Mode - No default collector

Hey folks-

Ive got an HA pair of Pano's in AWS that I needed to do some local logging to due to some missing features in Cortex.

Added the disks....changed the mode and poof! Nothing

Im not seeing a default logging collector or collector group as the d

Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

* We have Azure AD Connect sync On-Premise Active Directory with Azure AD

* We have valid Azure AD Premium license

We would like to know whether we can configure MFA for our VPN. If so which one we need to choose

Azure MFA server or Azure MFA cloud?

P

Messed up IPv4 ranges in output

We are on MineMeld version 0.9.52. We had an incident with MineMeld on the 4th of March that caused a major outage for many of our users.

We have four miners feeding in IP addresses for our block list (let's call them bl-1, bl-2, bl-3 and wl-1). Th

Basic Routing on PA-220

I have a new PA-220 for a test lab, and this is my first time configuring any PA device from scratch, so I apologize in advance if I've missed something basic.  I have set up the interfaces and I can ping out using the troubleshooting -> ping utility

Unnecessary traffic on WMI Port

Management interface generating unnecessary traffic on WMI Port... what could be reason??

Appliance: PA-5020

PAN-OS:8.1.11

Load balancing on palo alto

Hi Guys,

I am just wondering if the following scenario is possible 

Load balancing between the two client  VPN Gateways so half the clients connect to one VPN server at site A, and the other half connect to Site B.Palo alto firewalls on both sides.

Minemeld - NGINX reverse proxy

Hi

I am trying to setup a minemeld server (docker image https://hub.docker.com/r/jtschichold/minemeld/ ) behind a Nginx reverse proxy. This however is to be hosted on a subpath, however I cant seem to get the authentication to work (This all works co

Global Protect on Mobile Devices : Certificate based Authentication - Managed by Intune

Hey Team,

I am trying to setup GlobalProtect VPN on mobile devices (both IOS and Android). The requirement is to use client certificate authentication for the connectivity.The client Certificate are deployed to mobile devices via Microsoft Intune,

Wh