FQDN based PBF

Hello,

I have a customer who wants to replace proxy servers to NGFW.

The proxy server is used for website filtering as well as URL based routing especially for G Suite.

Unfortunately, PBF policy rule doesn't have URL as match criteria and only FQDN ob

Linux system Patch Issue

Currently we are facing a peculiar issue with Linux system, which when connected to URL but are unable to fetch the OSquery packs from the mentioned URL. The same url is working properly when the linux system is connected to an open internet & able t

Email sending times out when GlobalProtect connected

Hello, 

one of my colleges has an issue when GlobalProtect VPN is connected, the sending emails in outlook times out and all emails stay in the outbox. SMTP port is 8025

please help me with any hint, read through google results and could not solve th

Problem with Support Account

Hi,
I've just created an account with a PA-220 associated to it following the official documentation found in 
https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/getting-started/register-the-firewall#

I've finished the activation of the account b

QOS to a specific webpage/service for admin staff

Greetings

I awhile back asked the company that initially setup and installed my palo alto to set up a rule so that my admin staff will not have issues reaching a specific website. but i dont think they did it properly.

As a school of about a thousand

Clientless VPN Web Page redirection Issue

Hi all,

I published one of web service through clientless vpn (OS 8.0.13). After authentication Its not loding properly. I go through developer tool (F12) its given following screen.please help.

Thanks,

Lakshitha.

jumping from 8.0.17 to 8.1.7 directly?

can i upgrade from 8.0.17 to 8.1.7 directly? also would going to 8.1.7 change any of my current config? 

Forticlient connecting but no traffic goes through

Hello,

I am trying to use Forticlient to connect to a remote network outside our coporate network.

The connection is successfully established, it seems that the traffic is sent but no traffic gets received from the Forticlient.

Anything needs to be

GP switch from 'pre-logon' user to 'logged in' user

Hi,

We have got global protect pre-logon set up and pretty much working now after quite a few issues.

We still have one issue, although the pre-logon user connects fine when starting the end device prior to logging on (says connected on the windows sc

GP Client on MACs does not always detect internal network

We have an issue that seems to be impacting our MAC users only.  They connect to an internal wireless network, but the GP client does not detect that they are on the internal network.  (We're using the always-on feature.)  We've reduced the timeout t

NAT Configuration to access Remote Desktop

Hi,

We need to configure an input rule to authorize an public IP address to access at one of our virtual machine on our subnet.

Concretely, I need to authorize public IP address 195.193.194.195 access directly to our virtual machine with the private IP

SSL Decrypt & Windows Updates

Hello,

I've been having a problem with Windows Updates when SSL Decrypt is turned on and I'm wondering if anyone else had to add these "new" Microsoft URL's to the decryption exclusion list. My firewall is on version 8.0.3 and my Windows version is W

How to Configure IPSec Load Balancing Via Primary and Secondary ISP Connection

Dear Team,

I have a Dual ISP (Primary/Secondary).

I need to configured IPSec Tunnel via Load Balancing method. 

What the method that we can apply to achive this.

Regrads

Karthikeyan Balamurugan