Resolved! VPN IPSec gcm or cbc cypher types

When configuring VPN to a 3rd party vendor and you are given the required settings for IPsec profile as sha1 or sha256 only, however on the Palo Alto firewall we have the option to use cbc or gcm, e.g. aes-256-cbc and aes-256-gcm.

In the past I used t

Resolved! 3rd Party VPN integration with Global Protect

Hi;

I envisage that these are only IPSEC 3rd Party solutions establishing a tunnel to the GP Gateway or the GP SAAS.

Kindly

Wasfi

Resolved! stdlib.localLogStash - How to get mined data into logstash

Hello Team,

I have set up few IP miners and then processing through a inbound aggregator and then giving it to Logstash output,

Names have been customised as I have cloned the aggregator and output from existing prototypes.

I am not seeing any indicato

Resolved! Packet Capture Filters via CLI using debug commands

I am trying to capture traffic between a specific source on the internal network to any destination on any zone.  I totally understand how to enable captures and turn it on & off but my capture seems to be colleting data but not anything that I can r

Resolved! Does using OSPF for redundnacy to 2 different standalone FW's work

Is anyone using OSPF to provide hardware/route failover with 2 different PA models?  (3020 and a 3220).  cannot afford HA 3220 now but would like to have failover to old box.  Palo is saying this is not a support design?  I thought OSPF is network 10

Resolved! Minimum allowed version of Global Protect

1st/ Can we check with HIP what version of GP they are using to connect.

2nd/ Can we force users/clients to be above a minimum version to be able to connect.

Resolved! Does Pre-logon for Global Protect use the Computer certificate as a client certificate?

Hi;

Prelogon Global Protect connection, does it use the Computer certificate as opposed to the user certificate to establish the tunnel? It seems that the only way to do it.

Kindly

Wasfi

Resolved! Global Protect User cant login to the portal

User can login to GlobalProtect Portal normally. However, clicking a link to download the GlobalProtect client fails with the following error: "Could not find file".

Note: Global Protect agent has already installed and activated on peers

Resolved! URL Filtering - How does it work exactly with Service interaction

So let me start here fundementally all I'm trying to do is something like "Computer Y can access MS updates and nothing else" and my three pointers were:

https://live.paloaltonetworks.com/t5/General-Topics/Security-Policy-with-Service-URL-category-co

Resolved! Commit not needed for operational mode

Need to verify when on operational mode 

PA>  

No commit is needed right?

IT was save the config automatically