Remote Access on passive node of firewall ha cluster

Hello all,

I am currently configuring an HA cluster (active / passive) with the following configuration:

Primary (active) box: PA-820
ethernet1 / 1: 1.1.1.1/29 (external interface)
ethernet1 / 2: 192.168.0.1/24 (internal interface)
MGMT: 192.168.50.251/

Ipsec Proxy_id configuration issue

Hi Team,

 I'm not able to configure two separate proxy id in PA-3020 firewall. If I configure either the tunnel goes down or one of the proxy configured second is not working. 

Ipsec tunnel is IKEV2 between sonicwall and PA-3020.

I'm getting error "ik

Conditional NAT configuration request

Active/Active monitor traffic logs

I tend to see a lot of "Unknown" or "n/a" for session end reasons on an active/active pair. Is this normal? 

Wildfire submission log

I don't understand wildfire work.

I have this example that Firewall had wildfire-virus signature but was created wildfire submission log before wildfire-virus identification

why?

Info related to license, support and signatures version over snmp

Hello Community,

Do you know if over snmp I can to have information about, license, support and signature info? Someone implemented snmp and can to see this information like cacti or other solution.

Best Regards

Andres

Packet capture

We have an issue with SIP sessions randomly hang on the firewall. We are trying to do packet capture on the Palo alto firewall. Since the issue is random, so we need to leave the packet capture on until it happens next time.

It seems the firewall aut

Prevent Global Protect connecting when on internal network

After some advice please. How can I prevent Global Protect client from trying to connect to an external gateway when the device is on an internal known corporate network ? My connect method is already set to On-demand (manual user initiated connectio

Error: "Detected another instance" An old GlobalProtect instance exists... (Mac 10.14.5)

New Macbook pro, MacOS 10.14.5 the user account and applications were migrated using migration assistant.

In the past this works fine. User is getting continual popups: 

Steps taken: uninstalled using globalprotect installer. Reboot. Reinstall. Same er

PA-5220 HA Configuration

Please can someone shed some light on the following issues which we are facing for PA-5220 HA Configuration:

1. We can see port lights on HSCI port but not on HA-1/HA-2 ports even when they are connected,. Should they be enabled somewhere because in GUI

Connection between two DMZ zone with MPLS

Hello,

We have a server on the DMZ zone and another server in the other DMZ site.

We need to allow traffics between the two DMZ zones with the MPLS connection.

I don’t know how can I put this configuration on my PA firewall or maybe I should contact my