Firewall is limiting concurrent users for GlobalProtect

We are using PA-VM-300 and it should allow 2000 vpn users concurrently.

Our global protect IP pool is configured for /23, so firewall should accommodate 500 users, as it is having enough IP available in the pool. For some reason, when the other firew

FIPS 140 and CC enabling?

Couple of questions on FIPS.

1. When you enable FIPS140 on a Palo it wipes the device. Can you just reload your last saved?
2. Can a FIPS140 enabled device talk to a non-FIPS device over an ipsec tunnel provided the cyphers are compatible?
3. FIPS disables PAP.

L3 sub interface traffic monitoring

Hi There, How can I monitor l3 subinterface traffic - current & historical. mainly Bandwidth utilization.

Thanks

Rdp windows

Hi,

is it a good idea giving access to public windowd  rdp ?.

Folks says do not publish outside 

Any good reason for this ?

Thanks

how to create a log forwarding profile using gmail or office 365

Hi 

I am trying to create a log forwarding profile in the firewall and parallel we created the server profile for the Gmail and office 365 

while scheduling the report and used the Gmail or office 365 email id and we try to test the email 

we are getti

Global Protect // Multible post-vpn-connect scripts

After connecting with Global Protect I execute an post-vpn-connect script to mount the users network shares. I execute them in the context of the user.

Unfortunately, I need to execute another post-vpn-connect script in the context of an admin. 

Does

Mac computer GlobalProtect with Computer Cert How To

Below are the instructions that I have cobbled together to install GlobalProtect on a Mac and not have the system ask for authentication of an administrator at each connection.  Full document with pictures is available on my GitHub.

https://github.com

Office 365 JSON-to-flatfile converter as EDL feeder

Hi PAN Community,

How's everything going? I hope everyone is well and safe.

I know there are plenty of MineMeld fans out there but just in case MineMeld deployment is an overkill for your organization and Office 365 security is a burning item in your

SFP Virtualwire on PA-820

Hi,

I configure my device to virtualwire mode with sfp baseT transceiver but it wan't to work (they are red in GUI).

When I change to Layer3 mode everything work corectly (change to green).

In CLI I can see transceiver.

Have you got similar problem or an