Resolved! DoS protection policy process order

Hi All,

Basic question and l think l know the answer but just would like to confirm.

Is it the same for the DoS protection profiles if you compare with normal security policies, fist match from top to bottom?

I have a general DoS rule with broad src an

Resolved! Multi VSYS, VRs and ARP tables?

Hello team,

I will be deploying a couple of 3250s in HA and multi VSYS, and VRs.

My main concern is that are we getting separate ARP tables per each VSYS/VR? Let me give you some more background about what we will try to achieve:

We want to create 4

Resolved! Block all traffic but a single IP Address

Let me start by saying that I am not a firewall expert by any means but I think the task I have is simple. I want to block all traffic through a PA-500 except for a single conversation between a dedicated machine on each side of the firewall. Is ther

Resolved! GlobalProtect VPN - Management Access

Hi,

Does anyone know a way to get access to the panos web management interface over a globalprotect VPN? We are using three interfaces on our firewall;

1 - Management Interface

2 - Trust

3 - Untrust

Global Protect is setup on the trust - and I have a r

Resolved! Address to use for Tunnnel Monitoring with Azure VPN

I have used this KB article to configure an IPSec tunnel to an Azure network

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm6WCAS

That has worked fine and the tunnel is up and passing traffic.  However I want to enable tunn

Resolved! Log forwarding to Panorama from PAN-OS Firewalls for Threats

Hi Gang,

Would like to clarify how one sees threat logs from the PAN-OS firewalls in Panorama. Panorama is deployed as follows:

• system mode = management-only
• VM Mode = VMware ESXi 
• Firewalls = PA-3020 
• Version = All on 8.1.10

I have configured log forwar

Resolved! Commit Function on Suspended PA

When PA is in active passive mode.
I suspended the active PA and passive took over.

This is fine.

I did the config changes on the suspended PA and did the commit.
I saw that config changes from suspended PA got syn with active PA?

My understanding of s