Global Protect Pre-login issue with Microsoft Windows PKI generated machine cert

Hi,

We are trying to setup always on + Pre-Login with Machine cert which generated by Microsoft PKI and distributed by GPO when user turned on the machine . Then, when user login to the machine, it will use windows logon with SSO.  Like this KB.

http

Panorama Managed Devices names missing in HA peer, and show as disconnected when they're not!

Hi,

I'm using Panorama 8.1.13 to manage 60 or so firewalls. Mostly PA-220s with a few PA-5220. These firewalls are in a number of templated device groups.

Both Panoramas are M100 appliances. The Managed Devices are correct on the primary Pano. The De

Global Protect Info

Hi,

We have two GP gateways configured in our PA. We realised that the passive PA unit, we can see "remote users" connected. Why is this? It shouldnt be asumme all GP user sessions in the active unit?

On the another hand, what is the OID (SNMP) to ge

IPsec VPN tunnel cant ping eachother

Hi there,

I cant figure it out why tunnel interface cant ping each other even site to site VPN is up and running fine. Is there anything I am missing here?? I have setup multiple site to site VPN with all other vendor and its just works fine. This is

Email server profile with custom port

We have a client who wants to schedule PDF reports to an email server using a custom port.

The firewall will let him enter the port in the email server profile, but when trying to send a test email of the report, it fails immediately and tcpdump show

GlobalProtect v5.1.1 remembering wifi network, not allowing new wifi

Have rolled out GlobalProtect v5.1.1 and successfully connected from one remote location on the wifi network at that location.

When I move a new remote location with a different wifi, the laptop is connected to wifi I can browse the Internet, but Glob

What is the maximum number of Domain controller allowed to bind with PaloAlto Firewall

Hi Folks,

      I have this customer, who doesnt have centralsed AD and has 40 domain controller sitting across the network. to provide the zscaler solution, customer wants user-based traffic forwarding, but unfortunately he has pretty much close to 4

CVE-2020-8597 is it applicable for Palo alto ?

We have received a Critical Security Advisory related to Buffer Overflow Vulnerability in Point-to-Point Protocol Daemon (pppd).
 is applicable to our PaloAlto and Panorama Firewall devices.?


Risk Advisory No CVE-2020-8597
Advisory Name Buffer Overflow

Queries related to SSL VPN

Hello Team,

The below things are need to clarify,,,

1. How to know calculate SSL VPN interfaces bandwidth
2. Individual VPN user bandwidth consumption
3. Which VPN interface the highest bandwidth user is connected to
4. All active connected VPN users
5. Time duration o

Compare Palo to Panorama config before revert

I'm showing Panorama says that all of my firewalls are in sync in the Panorama>Managed Devices>Summary screen. However, if I change the Context to a firewall that has been out of sync in the past, I see that there is an Override cog next to the compa

Trafic blocked when security profile enabled

Hello Community,

Traffic is blocked by the Firewall Palo when security profile is enabled and need to disabled it to access to the destination server

How can we solve this?

Thanks!

S

GlobalProtect VPN version 5.0.7-2: Error( 53): Driver is not installed, reinstall it now!

On a Windows 10 laptop, we install the GlobalProtect VPN client and everything seems to run to completion.  However, when we try to use the VPN client from the tray, it acts like it's greyed out and is non-responsive.  Looking at the PanGPS.log, the

How the authentication will happen for GP if no Group Name and Group Password haven't configured

Hi Team,

I just want to know on how the authentication will happen and IPSec connection will be established if we haven't configured X-Auth "Group Name" and "Group Password" under GP Gateway settings.

As i see that it will use the Certificate provide