Globalprotect client config - force push portal config update?

We rolled out a vpn solution with “on-demand” login. This has proved successful and we now wish to convert the configuration to be “always on”

I have changed the portal configuration to “prelogon always on”, but the clients do not pick up this config ...

Require to restrict/ Control session of firewall ???

Please be informed that we want to restrict/control traffic for any specific service in our Core Firewall- Palo Alto 5050. Suppose, we want to allow maximum session/request – 10 thousand per month or 2 thousand per week in our firewall. So, is it pos...

Migration from symantec proxy sg to palo alto firewall

Hi All,

I am planning to migrate symantec proxysg ( proxy device ) to palo alto firewall device .

give some suggestions.

Block urls with *.php

I tried creating a custom URL categaory and adding *.php to it, and then use that in security policy, it doesn't seem to take any effect.

Correct IP setting when two firewalls connected to one ISP.

We have two PA's connecting to one ISP. One is just being set up.

The ISP is "10.10.10.0/27"

Route is "10.10.10.5"

Is it correct to have both firewall external vlan interfaces as such

FW1 "10.10.10.99/27"

FW2 "10.10.10.122/27"

 Vlan 140

And for the N

SNMP MIBs

Is there a list of recommended severities (i.e. Normal, Major, Critical) for events defined in the SNMP MIBs ? 

Thanks for the assistance

Security event

We have a security event that is repeated in a series of users, Not many users but the event is very frequent

---------------------

EVENT
Memory Corruption Exploit
AGENT TIME
21 May, 2019 at 6:08 (2 hours ago)
AGENT LOCAL TIME
21 May, 2019 at 6:08 (UTC +0

VPN client to site don't much the local dns register

Hello,

I have configured the PA-500 firewall with VPN client to site tunnels . The VPN tunnels work correctly but i can't reach the local  servers name on the DNS.

I add our local DNS address on the agent gateway setting of Global Protect without resu

500 INTERNAL SERVER ERROR

Getting "500 INTERNAL SERVER ERROR" while doing preview config/commit using GUI in panorama .

Any suggestions .  

Thanks ,

Apple Airplay between zones

Have anyone try to get apple airplay to work between firewall zones?

TIA,

E

IP to local address object/hostname resolution.

Prior to an upgrade Panorama was able to resolve an IP address to the host/object name of a local address object.
For some reason, the resolution has stopped working and support seems to not know what I am referring to but yet it is discussed here 

htt