General Topics

Issue with Gprotect and Azure AIP

We are launching the Microsoft AIP (Azure Information Protection) solution to encrypt documents, etc. The point is that this is working from the office, but when we are with Globalprotect (with the tunnel up) the PC is hung (not only when trying to encrypt an email or a Word document, but simply by going to Outlook and put us on an already prote...

Regarding TLS 1.0 & 1.1

Hi Everyone, Can someone suggest on how can we detect TLS 1.0 & 1.1 traffic in Palo Alto ? Thank you.

Resolved! Runing Windows 10 Defender in tandem with Traps

Hello Palo Community! How can I run Windows Defender on a Windows 10 machine with Traps?I observed Windows Defender was automatically disabled when Traps was installedHow can the both runing?Thank you for your help

does MFA is supported in paloalto clientleass vpn

we have setup in aws with elb looking for solution to have clientless vpn working along with MFA authentication

Resolved! Home lab - Setup with Google Fiber

Hello All, Has any setup a home lab with a google fiber box and a PA-220 ? From what I have gather so far. the Google box is not able to do bridge mode and they require the Gooble Fiber box to be in the line in order to receive service. I was thinking I could just port forward all ports to the interface the PA would connect to, but I do not know...

Palo alto website issue - Virtual wire

HI Guys, Customer has deployed Palo alto firewall in virtual wire mode between Cisco Meraki Gateway and Cisco meraki coreswitch. We are seeing a issue where the website is not loading in first attempt. For example if we are seeing visiting website XYZ.com for first time in network it shows an error "This Site can't be reached the connection was ...

SSL\TLS Profile deployment via Panorama

We have a Panorama running 8.1.9 and were looking to utlize almost every setting possible in Panorama to deploy to our managed firewalls. One of the settings we are looking to standardize on is the SSL\TLS profile. I see you can set this via Panorama but it requires you specify a certificate. Does this feature deploy the actual certificate or j...

Resolved! PA 850 does not show all interfaces in CLI and web gui

I found on some PA when you do show interface all from cli it does not show all interfaces why is that? Also on Web gui it does not show all interfaces? any reason for this behaviour?

Resolved! External Dynamic List

Hi, We are planning to use URL type EDL (external dynamic list) in a security policy rule / URL filtering profile. Does PA translate the URL in the external dynamic list to IP address? using FQDN refresh (like if we created an FQDN object in the firewall) How does it work exactly? any inputs would be appreciated. Thanks

Resolved! PA-220 FIB limit

HiKindly I need a feedback about how many maximum routes PA-220 supported to learn from OSPF Neighbors ?ThanksKonrad

Config not reflecting on firewall when pushed via panorama

Hi , We are facing unusual issue in our enviorment .We have pushed the changes from Panorama to devices but changes are not reflecting on individual firewall . Verifed commit logs , no error . All showing result succeeded . Panorama version - 9.x.xFirewall version 8.x.x Anyone faced similar issue ? Or any suggestion regarding same. Thanks .

Resolved! GP gateways under the same ISP

Hello , I have setup for the company portal and gateway with a specific IP pool and there is one pulbic IP on the ISP. Now they want partners to connect as well and I was wondering if is possible to have either on the same gateway another VPN IP pool and setting like DNS or I can make another gateway under the same IP with another port.