What's the best way to implement Global Protect in my home network so that I can access it from the outside?
Hi, Are there any best practice settings for the reconnaissance portion of the zone protection profile. I see the default has the below. Is it recommended to leave as defaults or does someone have a better recommendation? TCP Port scan 100 events within 2 secondsUDP Port scan 100 events within 2 secondsHost Sweep 100 events within 10 seconds
Hi, I'm working on home lab and tried to configure clienetless global protect eveything went well expect when i authentate the user i got this message " GlobalProtect Gateway is not licensed. Contact system administrator. ", however during my reading on palo alto materials it says it don't require a license " https://docs.paloaltonetworks.com/g...
Hello All, It appears that the large list of IPs and domains to completely enable split-tunneling with GP for O365 & Microsoft Teams requires the GP license to facilitate defining domain names in addition to IP networks (which I understand works without a license). Are you able to split tunnel O365 and/or Microsoft teams without a license? ...
Hello, Can someone said me the release date for PAN-OS 9.1.1? Regards,
Can i use URL filtering using custom URL categorys if i do not have a URL filtering license.? when i try i get the following warning message. No valid URL filtering license,
Hello community, I´m sharing with you this doubt you maybe can help me with: I´m only interested in having the group-user mappings and not ip-user mappings. Is this possible? Furthermore, is it possible to retrieve group-user mappings without having to configure the server monitoring? The idea is to configure the LDAP server profile and then the...
I'm trying to setup a PA-220 for the first time. I'm able to access the fw via the web interface when I directly connect my laptop to the mgmt port. I'm stuck on Step 11 (https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/getting-started/integrate-the-firewall-into-your-management-network/perform-initial-configuration). I am not able to ...
Hi Team, I have configured GP using "On demand" method when I tried to disconnect GP by ran the command (user@linuxhost:~$globalprotect disconnect ) getting below error, sweekrit@sweekrit-HP-240-G6-Notebook-PC:~$ globalprotect show --errorUnable to establish a new GlobalProtect connection as a GlobalProtect connection is already established from...
Hi there, We have a PA with two Virtual Routers, Internal VR and DMZ-Internet VR. When I type show routing fib virtual-router "Internal VR" for example the forwarding table shows a name for next hop and interface, see the output below: show routing fib virtual-router "Internal VR"id destination nexthop flags interface mtu------------------------...
We have set Disconnect on ideal for 20 min and we have tried to log off from the PC and login after 20 mins and GP is still connected,what could be the issue. Inactivity logout seems to work after 2 hours Palo version 8.1.13GP- 5.1.1
A company needs to preconfigure firewalls to be sent to remote sites with the least amountof reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.Which VPN configuration would adapt to changes when deployed to the future site? A. Preconfigur...
Does anyone else having below issue with the Okta CDN? Screenshot has been attached for reference.
Hi Community, I have a requirement to have client authentication in globalprotect portal/gateway to have with LDAP first then another profile wich is SAML based. the requirement is to authenticate with SAML profile if LDAP auth fails. But as SAML profile cannot be added in authentication sequence, i cannot take advantage of authentication sequen...
How can we check from CLI sessions that have been running for hours or days.
Raido_Rattameis
PavelK
on:
Unable to Create a New Support Case – Portal Access Issue
