General Topics

Resolved! Create VPN Profile or Group for a vendor to access specific internal server

Hello all,

We snagged a PA820 to replace an old ASA 5510. 

I think I have everything set and I am almost ready to cut over to the new PA firewall, with one exception: I am drawing a blank on the best way to setup VPN access for a support vendor.

With

Resolved! Dynamic Destination Routing

Hello All,

i have a senarion in which a user vlan routed to internet link1 thorugh policy baseed routing now i have a one destination which has dymaic IPs and only can open with internet link 2 i want this destinatioon to be opend for the user vlan, h

Resolved! unknown-tcp when tls decryption is enabled

I have a VM-100 in my lab. I haven't used it in while but recently booted it up and upgraded to 8.0.12.  I noticed a lot of unknown-tcp traffic for mostly any site when I enabled tls decryption. If i disabled tls decryption, the traffic is all ssl.

I

Resolved! AppID Rule with Service "any"

Hello,

I want to now the risks of allowing an application with any services.

Below an example. Thank you in advance

Kind regards.

Resolved! Panorama Shared Policy Zones

Hi all,

I want to understand before I deploy shared policy in Prod 

I have 2*2 firewalls in HA (2 For DMZ, 2 For LAN) - I want to create a shared policy to both firewalls (LAN and DMZ)

For example,

In LAN I have 3 zones (Users, Servers, DMZ) 

In DMZ I Hav

Resolved! zone protection issue.

Hi to all!

I have such kind of problem.

I have applied Zone Protection profile on my outside(untrust) interface.

The problem is, that PAN is behind IBR(is configured as virtual wire), where are configured all our public ip.

What can we do in this case?

Th

Resolved! Traffic using unintended Security Rule?

Hello folks,

We have recently installed Cisco Nexus switches and UCS system.  All of our routing has been through our PA firewall and continues to be, except for a new Management network created on the Nexus switch.  We are trying to use this managem