Behaviour of VPN tunnels in HA pair during the failover

Hi

Can anyone please explain the behaviour of VPN tunnels during the failover on PAN.

Does the ISAKMP and IPSEC SA table gets passed on to the standby unit ?

Does the VPN tunnels will re-estalish the session again  on the new active unit after the failo

Panorama Templates and default vsys settings?

What is the purpose/consequence of a having a template with a default vsys set to either : vsys1 or None -

This is found under: panorama/templates/(specific template name)/Default VSYS/(option of vsys1 OR None)

I'm finding that our firewalls with mult

What the heck is in /pancfg?

Hi all,

I'm trying to figure out what is taking up all the space in the /opt/pancfg filesystem on my Panorama appliance.  I've deleted all the old saved configurations and lowered the number of config audit versions from 100 to 50.  (Each of these ve

OVA file

pa-vm-esx-8.0.ova 

I need to download the OVA file for training purposes. How do I go about getting a file?

File Blocking - No URL?

Hi

I have various response pages configured to allow the user to click and send an email when hitting a blocked site.  The URL one works fine - user clicks continue, new email pops up with the following placed in the email : URL and user name. 

For F

Url blocking

Hi guys,

surely a stupid question, but cannot find out.

PA (a 5060 couple), as seen in the screenshot, allows the connection but blocks the corrispective URL.

How can I allow the URL too?

Thanks

Configure VPN from Android Phone to Access VPN

Hello All,

I am trying to configure my android phone to connect to palo alto vpn.  I use IPSEC Xauth PSK as Type and the IPSEC identifier do i need to put the Group Name and Group password from X-auth support.

Can someone confirm me this.

No sound/video MS Teams while using minemeld to pull Microsoft IP's

Hi,

When we start a teams meeting we have no sound or video, one to one call works! 

We use minemeld with palo alto to get list of allowed microsoft IP's.

But we see requests to the following microsoft IP's that are not in this list:

• 51.144.76.36

Setting up Palo FW in vwire mode between router and switch.

We currently have a Cisco switch and router with in our environment. The router does inter-VLAN routing for traffic coming from VLAN's (about 6) on switch; typically as in a ROAS setup. So the switch is L2 and router is L3.

Looking for a away to plac