Adding additional public IP range

Hi all - I've been having a bit of trouble getting this to work - I've done it on Cisco & Sonicwall boxes before, but this is my first PA 3020.  We were just assigned additional public IP addresses by our ISP. The existing block is 206.x.x.x/29 and t

The new Palo Alto Networks Certified Network Security Administrator (PCNSA) exam

Any info on this exam. On the PA cert web site it says it is coming soon.

Thanks

Al

Security policy rule - allowing a specific host access to ftp.sophos.com

Hello,

A colleague needs to access ftp.sophos.com (195.171.192.29) using Filezilla as their SFTP client, via TCP port 990. I set up the security policy rule as follows:

They could not log onto the ftp.sophos.com site. The password credentials they

Does "pre-logon" user belongs to "known" user?

Dear Comm,

I was googleing alot about this topic and but only found this:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXlCAK

My specific question is, if a the User ID agent show the username "pre-logon" learned via "GP"

Downgrade Pan OS

Does the debug svm revert still work on the 8 os? 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcYCAS

redistribute global protect ip pool subnet into bgp.

I am running VM-500 in cluster on 8.1.4 . I have global protect configured with ip pool of /24.

I need to redistribute this range via bgp. I can see this range in the routing table.

Odd NAT issue...

Had a very odd issue yesterday,

I created two new Bi-Directional nat rules [seperate NAT IP's] to the outside world, one worked fine the other did not...

One server could not get to the outside world..

The NAT matched [OK],
The Security Rule Matched [O

Certificate Setup on HA Pair

Hello,

I wanted to use the SSL/TLS profile facility to restrcit management GUI sessions to TLSv1.2 but am having trouble with the certificates/process to follow.  We have an Active/Passive HA Pair, i have been trying to setup on the passive to test b

ldap user group unable to get access

I have ldap server setup with auth profile. User gets authenticate by ldap server and can login via global protect.

User is part og the group and a policy is created for this group to access resources.

If i change the group to any access is granted but

GLOBAL PROTECT removes the windows 7 product key!

Whenever i install global protect on a new machine, it removes the windows 7 product key, making it non-genuine.

Is anyone else having a similar problem?

Regarding pcnse

What is the level of toughness that we have in real exam than what we see in practice test on a scale of 1-5.
Is there any good pcnse practice tests that match the level of real exam. The only source of my prep is just the pcnse study guide is there a...