proxy_arp_pvlan

Hi all,

I was dealing with a scenario recently which I eager to use the Palo Alto firewalls.

In my design, it is a must to use the feature which is called ARP alias in Cisco terms, and ARP publish in Juniper terms. In case of Linux as Palo Alto is usi

Azure Cloud IPs with Service Tags - REST API

I know there is a miner today for the Cloud IPs with Service Tags from a JSON file download.

There is also a REST API that could be used to pull this information, and would in a way work better than the existing JSON file, because you can split on lo

HIP Check licensing expired

I thought that HIP check licensing expiration (trial version), would cause any rules on the FW - using a HIP check profile column to not match.   Instead, it appears that it causes the firewall to simply not care about that column at all.... and allo

Need help with Minemeld converting Hex address to dot-decimal ip address

I have a specific application that provides a list of addresses via API only in hex that I want to pull via minemeld but need to convert it to dot-decimal addresses for eventual usage with Palo Alto firewall policies.  Does anyone have a tool or usef

Removing my site from Palo Alto's blacklist

Hi, please tell me how can i contact to Palo Alto for taking  my blacklisted domain to whitelist in a palo alto DB

TCP TimeOut caused by the PA?

We have a video app that is streaming through our Palo Alto firewall on port 80. Everyone once in a while the session fails and can only be revived by hitting refresh in the browser. I am dealing with a network manager that's convinced the PAs are Re

Global protect app transparent update issue

Hi Team,

I have an issue, where customer is not able to update global protect app using transparent option. I'm explaining the issue in very detail to avoid confusion.

User machine is installed with client version 2.3.1. During the time of deployment

Windows, Kerberos, LDAP, RADIUS

Hi! My company is rolling out a small pile of Palo Alto firewall models and I'm trying to learn the nuances and best practices of these devices. Initial implementation and basic functionality has been pretty straightforward. Now we are trying more ad

TI Automation - Indicator Pipeline with Safe List

Minemeld is very flexible and very useful for manipulating indicator lists which are then available to Palo Alto Networks Firewalls for ingestion.  The challenge presented to me was how to incorporate this capability into the existing customer workfl

GlobalProtect not working if laptop has no internet at boot

 I have prelogon setup for globalprotect using machine certificates, so that when a laptop boots up with internet is automatically connects to globalprotect.  This works perfectly fine, except for when a laptop does not have internet access.  If a la