Hi all, Is active/active mode supported with Layer3 sub-interfaces? I'm trying this in a lab with 2 VM-50's, and whilst the cluster is formed, I seem to have intermittent packet loss; not sure if this is just a limitation of the VM series (in particular, VM-50) or the fact that they are not true layer-3 interfaces? The customer has a pair of 522...
We wanted to confirm whether GlobalProtect supports SAML for Azure ADFS (Cloud Based)Do we have any document that has the configuration steps for this infrastructure? I am not able to find one
Hi, I have an issue where the class of my miner is not found. I saw lmori posting that you need to add your new class to the nodes.json file, however that file does NOT exist. Tried both cloud init image and an own ubuntu 14.04 server. Tried my own miner and the ytexample miner. Tried to create the file but that did not help at all, even co...
SSL Decrypt is configured for all Google Services.But when using the Chrome or firefox to launch any services provided by Google, the decryption doesn't work. and tried with blocking quic protocol nothing is working
Dear Fox,After 2 minutes not able to access the internal resource through Global protect VPN. While investigation I found the user is showing unknown (>show user ip-user-mapping ip x.x.x.x) Attached screenshots name"User-id-01". using the local authentication method for global protect VPN and configured connection timed out greater than 30 mi...
I am testing the GlobalProtect on EL8 at my work. Is there any documentation for Linux on stanza that can be added/modified in ~/.GlobalProtect/pangpa.xml? Thanks.
Hi, I have a few questions regarding policies using user-id for access. When I select add, to add a source user into a policy I can start typing a name and it will give me a list of users with thoses names to add in, like a prepopulation.Is there a limit as to how many it will display?for example, if i type the domain first it will give me a lon...
LACP configure between PA and cisco switch Active and Active mode and transmission rate: slow======================================LACP System log::::LACP interface ethernet1/19 moved out of AE-group ae2. Selection state Unselected(Link down) l2ctrld.log file below 2020-04-12 00:19:25.085 +0400 Got port 82 event, link 0, speed 4, duplex 22020-04...
Device had been used with Panorama and now removed. Not able to retrieve the license to device now. Has anyone faced this issue before and is there any solutions?
Hi, I found this thread in General Topic (https://live.paloaltonetworks.com/t5/General-Topics/Unable-to-access-Windows-Store-Windows-10-GP-3-0-2/td-p/109438), and I have the same problem in my infraestructure; but no only with Windows Store, also with Kindle application for Windows 10. The problem is that applications (Windows Store, Kindle) are...
Hi team, I want to block .pst .dat .csr files.I know the PA FW works on file types rather than file extension, but i want to know .pst and .dat and .csr are which file types ?
Hello team, Can we add multiple firewalls to same device group? We have one requirement where all the security and NAT polices are same for each firewall instance. So we are looking into something where there will be common device group polices, and All firewall instance will be attached to this common DG. I was looking for some articles but did...
Hi Can any one explain the difference between the ip poolsa) Global protect / gateways ... external gateway / agent / Client ip poolvsb) Global protect / gateways ... external gateway / agent / client setting / ip pool so fora) I can't reference an object .. thats annoyingb) I get the pool is just for that setup, I do like having 1 pool of the...
I have a client that is currently using Sonicwall and wants to migrate to Palo Alto. Sonicwall supports Transparent IP Mode (Splice L3 Subnet) that basically can bridge the WAN subnet onto the DMZ interface.Let say for example,WAN Interface - 100.100.100.1/24 - L3DMZ Interface - 100.100.100.1/24 - TransparentLAN Interface - 10.10.10.1/24 - L3T...
PavelK
on:
Throttling ingress bandwidth on a sub-interface
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
OtakarKlier
on:
Palo Alto 1420 - Invalid username or password.
