Keep Username for Two-Factor-Authentication Global Protect

hey

i am configuring two factor authentication,

1) portal with certificate

2) gateway with OTP

i have noticed that i can authenticate to the portal with user "A" and than on the gateay i succesfully authenticated with the OTP of user B (username & pass

show counter interface management multicast packets dropped

show counter interface management

Interface: Management Interface
-------------------------------------------------------------------------------

-------------------------------------------------------------------------------
Logical interface counters:
-

PAN-OS 8.1.3 in production environment?

Anyone running 8.1.3 in prod? I have a change window to upgrade this weekend from 8.0.3 to 8.1.x as we wish to make use of the split tunnel by URL feature in GP, but reddit has filled me with some horror stories

Routing traffic from branch through HQ to vendor

Currently Im labing a situtation where I'll need to have branch users route to a vendor through HQ via IPsec tunnels. Users at my banch access can acesss Web/HQ services though the HQ firewall, but when accessing the vendor. Logs show from HQ the at

schedule export configuration file via email by automatically daily

HI

I have a device pa 220 firewall but without panorama 

I have a query 

I need to schedule to get the configuration file on a daily basis for my email is it possible?

About monitoring Memory statistics for DP

Hi all,

How can I monitor memory statistics on dataplane from the CLI (not SNMP)  ??

Regards,

HA

Monitoring VPN tunnel status

Hi,

I would like to monitor VPN is UP using NAGIOS. I think its necessary configure tunnel monitor for this, right??? what are the options to monitor VPN is UP? and monitor config profile.

Log s for Firewall generated Traffic

Hello All - I am not seeing logs in the monitor section, when i generte traffic from Paloalto Firewall itself. For example,  when I ping 4.2.2.2 from the Firewall, i am not seeing logs showing for.

Is it a known behavior? or i missing something? is t

How PA 5220 appliance sends netflow packet when configured in HA and Vsys Mode.

How PA 5220 appliance sends NetFlow packet when configured in HA and Vsys Mode. does the firewall find egress interface by looking into routing table for Netflow packets? If it is Yes, So why we need to change service route on PA 5220 appliance,

Seco

Link Aggregation - IP addressing

So I configured Link Aggregation on my PA5260 running 8.1.

The first pair of links in ae1.8 comes up perfectly using 192.168.255.3/25 as the IP address. The second pair of links in ae2.9, however, refuse to respond on 192.168.255.131/25. The second p

PaloAlo ports not coming up!

Hi,

I am configuring some new PA850s and interfaces are set to Vwire mode. ports are connected to cisco switch but they are not coming up.

they come up and go down. here are settings from cisco side:

speed 1000
duplex full
no mdix auto

paloalto ports:

sp

Importing Logdb into different devices

I'm trying to import logdb coming from a PA-2050 to a smaller devices like VM-100, PA-200 or PA-500 but without any luck. Has anyone successfully tried this operation?

The command scp import logdb from ... seems ok but in the end no data is shown unde