General Topics

Resolved! Troubleshooting Application Incomplete with two way TCP traffic

We are having issues with one application while migrating the network from ASA to PA

PA is Running 8.0.9 on 3020.

Application shows as incomplete with more than 4 packets.

We see trasmit and receive in the PA.

Nothing in threat logs.

As per TAC they say

Resolved! Phase 1 is down but phase 2 is up- test vpn phase 1 and 2

we have tunnel from PA  to vendor which is using Cisco ASA.

When there is no interesting traffic tunnel is down by design this part is ok.

but today i saw phase 1 as red and phase 2 as green on gui.

I did the 

test vpn ike command and phase 1 was green

Resolved! Does PA global protect gateway support remote access vpn without GP client

Need to know if PA Global protect can support 3rd Party Remote access vpn?

For example remote access vpn from modems using ipsec?

We need to support remote access vpn for some clients where the end user will not have the GP client installed on their

Resolved! Error Message in PANGPA logs

Hello,

We are using 4.1.0-98.

The clients at fault work fine through a tethered mobile, however when connecting to their home WiFi the connection is successful but nothing will work through the VPN.

Below is a log snippet. What exactly is going on he

Resolved! Identical Rules on 2 Firewalls

Hello

Is there a way in which I can see which security rules are identical on 2 Palo Alto Firewalls?

Probably with Migration Tool or something?

BR,

RJ

Resolved! Feature Request: Preference Option to Restrict Zones/Objects to Only Existing When Building Policies

The current PAN-OS GUI makes adding objects and zones on the fly very easy while building policies.

Unfortunately this sometimes casues unwanted side effects:

As an example, when building a security policy including the zone "Admin" I started typing "a

Resolved! PanOS 8.1.5 No SNMP ifInOctets/ifOutOctets

We recently upgraded our firewall to version 8.1.5 and noticed that SNMP data traffic monitoring stopped working. If we get de SNMP values, we receive this informations:

Resolved! DNS is changing?

Anybody has hear about it and are PA firewalls effected by it. It seems they are making some changes to its functioning. Does PA application supports the said change?

Resolved! Application changed color in ACC.

Hello,

I changed a timeout value on an application and then changed it back to original setting, after this:

The application show up in a greenish color (like the support info button color) in ACC

The application lost its category and sub-category. Bo

Resolved! rule any any with no security profile

need to confirm if i use rule with any any and no security profile does it do any layer 7 inspection?

is this same as app override?

Resolved! LACP question

I was given this design to implement on our PA 5050's. This would be to segregate a user segment (4500x-VSS) from the data center (7K's vpc). Can anyone tell me if this is a valid LACP connection? I have never seen it done without a Stacking or VPC l