General Topics

GlobalProtect Agent

Hi 

I want to know if there is a way not to allow old  GlobalProtect Agent to connect to the Palo Alto network firewall?

But allowing to update the client before logging on to the VPN?

Thank you

Rule Viewer

Hi folks,

I was wondering if there was some kind of rule viewer, that can render the rules in a table from the exported files.

Why I need this: Our managed service provider sends us an export of the firewall rules every month and we have to review th

PaloAlto 3rd party captive portal integration

Hi! First of all sorry if this question is explained anywhere else; I've dedicated a few hours to browse docs and posts but I cannot find a proper answer. I work for a company that deploys hotspot solutions over premises using different hardware solu

Inbound NAT with Port Redirection for port 443 using a single outside interface IP ?

My ISP only provides a single ip address for the outside interface via DHCP.

I would like to forward port 443 to and internal host, but Palo keeps dropping the packets.

It seems as if the device management restriction is responsible for this, but I ha

Captive portal bypass

New to Palo Alto.

is there a simple way to disable/bypass the Captive Portal for a pc based on IP or IP range? Please be detailed since I rarely deal with the PA.

Total number of profiles (xx) exceeds platform capacity (xx)

Some of our smaller PAs are starting to have their commits fail do to the number of profiles configured in Panorama.  The error I receive is "Total number of profiles (xx) exceeds platform capacity (xx)".  I followed this link but it does not seem to

ENOTFOUND api.nodesecurity.io api.nodesecurity.io:443

I am getting the below ERROR when installing on Ubuntu 16.04 using the instructions on the below SITE.  The URL's that are referenced api.nodesecurity.io do not resolve to an address which seems to be the issue, does anyone know how I can continue th

Should I use BFD when in active/passive HA with OSPF?

I am setting up some new OSPF adjacencies between my PA and a pair of Dell switches. Should I be using BFD? Will BFD make things better or worse?

What I currently do is set LACP in HA passive state. OSPF graceful failover is configured on my switches

Client IP Connectivity Issues

Hi All,

I have a PA-200 running Version 8.1.0 and providing DHCP addresses to about 175 clients.  The pool is a /24 and recently, the clients have been getting messages stating another device is using your computers IP address.  I've been tweaking th