General Topics

GP Client on MACs does not always detect internal network

We have an issue that seems to be impacting our MAC users only.  They connect to an internal wireless network, but the GP client does not detect that they are on the internal network.  (We're using the always-on feature.)  We've reduced the timeout t

NAT Configuration to access Remote Desktop

Hi,

We need to configure an input rule to authorize an public IP address to access at one of our virtual machine on our subnet.

Concretely, I need to authorize public IP address 195.193.194.195 access directly to our virtual machine with the private IP

SSL Decrypt & Windows Updates

Hello,

I've been having a problem with Windows Updates when SSL Decrypt is turned on and I'm wondering if anyone else had to add these "new" Microsoft URL's to the decryption exclusion list. My firewall is on version 8.0.3 and my Windows version is W

How to Configure IPSec Load Balancing Via Primary and Secondary ISP Connection

Dear Team,

I have a Dual ISP (Primary/Secondary).

I need to configured IPSec Tunnel via Load Balancing method. 

What the method that we can apply to achive this.

Regrads

Karthikeyan Balamurugan

PA is dropping SYN packet with ECN and CWR

Hi Team, @reaper , @BPry 

Recently I have come across a scenario that palo alto was dropping TCP SYN packets which have ECN and CWR bits set. upon checking the global counter, i have seen that the drop reason was 'process owner message err, no predic

Anti-Spam list for EDL

Hello.

A customer would like to add smo more anti-spam features to a Palo Alto FW setup and is intersted in using EDLs in connection with publicly available anti-spam lists. Anyone knows a good and free anyti-spam list I could use for that? I've chec

Remote Access on passive node of firewall ha cluster

Hello all,

I am currently configuring an HA cluster (active / passive) with the following configuration:

Primary (active) box: PA-820
ethernet1 / 1: 1.1.1.1/29 (external interface)
ethernet1 / 2: 192.168.0.1/24 (internal interface)
MGMT: 192.168.50.251/

Ipsec Proxy_id configuration issue

Hi Team,

 I'm not able to configure two separate proxy id in PA-3020 firewall. If I configure either the tunnel goes down or one of the proxy configured second is not working. 

Ipsec tunnel is IKEV2 between sonicwall and PA-3020.

I'm getting error "ik

Conditional NAT configuration request

Active/Active monitor traffic logs

I tend to see a lot of "Unknown" or "n/a" for session end reasons on an active/active pair. Is this normal?