Direct Sinkhole traffic to a specific IP on 80/443

Hi Guys,

Is it possible to direct inbound sinkhole traffic to a custom IP on ports 80/443?

I am trying to see if I am able to redirect traffic hitting our "geolocation block" rule and redirect it to a block page.

Thanks.

Test security policy match cmd from Panorama CLI

Hi All ,

Can we use test security policy match cmd from Panorama  ? 

 i can see option in GUI , but unable to find using CLI .

Thanks

IPsec VPN throughput on 3220

Hi Everyone, 

As per PA-3220 datasheet IPsec throughput can be 2.5Gps.

https://www.paloguard.com.au/datasheets/pa-3200-series.pdf

The palo in my environment got  1 Gig interface (internet facing) and multiple ipsec tunnels are configured to communicat

how to create virtual system in gns3

Hello Experts,

I am new to palo alto. I have installed palo alto (8.0.0) in gns3 but there is no option of creating virtual system. May i know how to create ? Also could you please let me know from where can i learn palo alto. Is there any document/we

Both firewall become Active in Active Passive setup.

Hi Team,

Can anyone tell that in what situation both firewalls become active in Active- Passive setup of HA?

Thanks in advance!!

Email notification on Palo alto devices, in case of disk full.

We need help in configuring the Email notification on Palo alto devices, in case of disk full.

URL filtering does not work with Firefox

I am applying URL Filtering but I notice that with chronium type browsers it applies the blocking, making tests I see that the filters are not being applied when you surf with Firefox.

You can even enter XXX pages.

What's wrong?

I am bringing user group

VPN Palo Alto<->Cisco router issue

Hi,

We have a VPN between PA and cisco router. THE VPN is UP but we are having a strange behaviour with Phase1 lifetime.

WHen the lifetime phase1 expired (24hour), the phase1 goes down in CISCO side, and we need to renegotiate pahse1 in order to get u

XFF Value 1.1.1.1 when "Strip X-Forwarded-For Header" enabled

Hello,

Looking for some help if possible?

Trying to set up XFF (PA-3250, 8.1.12), I have tried to set it up following this tutorial:

https://live.paloaltonetworks.com/t5/General-Topics/Configuring-XFF-logging-without-a-URL-Filtering-License/td-p/23998