Subscription signatures off-line updates

Good afternoon, colleagues, I have three subscriptions: url filtering, threat prevention and wf500 signatures. How to update them off-line and is it possible to distribute these updates for the firewall and wf through Panorama?

NAT to VLAN Interface

I would like to NAT to a VLAN virtual Interface that has two physical ports attached to the same VLAN.  I am assuming this should be easy but am not finding alot of documentation.  Basically I want to create a vlan interface, assign an IP to it and t

Microsoft VPN client used to GP VPN

Hi Team

Customer want to know whether Microsoft VPN client can be used to  connect Global Protect VPN. This will eliminate GP agent installation in User’s machine.

Regards

Mohammed Asik

Content Image Uploaded. Failed to Install Image

I have a PA500 that has been offline for some time with Content version 695-4002. Am trying to reinstate it and upgrade with latest Content and Application but continually get failures.

The device is still under support and we managed to update it to

Security Based EDLs

I am trying out a PoC for Palo for a specific threat purpose.  The box came with some EDLs that I didn't expect and figured I'd share here.  They seem to cover a wide range of threats that would be really benefical for others to have deployed.

I'd j

ETA for UserID support for Windows Server 2019

Hi,

My Server team are asking when the PaloAlto UserID will support being installed onr Windows Server 2019, as they are planning on upgrading the current server it runs on. Is ther any road map or ETA when we can expect this?

Don't need 2019 AD suppor

Global Protect Next TokenCode Mode

Hi all,

 Just wondering what I am missing in terms of getting the GlobalProtect Portal and Gateway to show next token prompts etc.

I have a fairly straightforward ISE RADIUS setup that talks to RSA AM. The authentication and authorization works except

Presales question: External IP address assigned through DHCP and /29 routed to this IP, possible?

Hi all,

I am considering to replace my Cisco ASA 5505 by a PA-220.

My situation is as follows:

1. The external interface is part of a trunk where internet connectivity is delivered on a specific VLAN.
2. The IP address on the external interface is assigned by

Packet lost during HA Failover

I am seeing few packet lost when its switching over to passive mode. is there any way to prevernt this?

BGP - TCP/179

Hello Folks, 

I have a simple BGP question. 

I'm going to be creating a BGP peer between a Palo Alto firewall and a Cisco router. Do I need to create a security policy allowing TCP/179 between my Palo Alto firewall and the router. They are directly co