General Topics

hi Community

Hi all,

We have upgraded globalprotect version 3.1.4 to 4.1.2. Its connected successfully . But after some time it saying portal not available. username take as portal name. anyone experience with globalprotect 4.1.2???

Custom HIP Check for Linux

Hey guys,

I've been tasked to have Globalprotect only allow company owned devices over the VPN. I know I can create custom HIP checks for Windows/Mac (reg/plist value). How would I do the same for Linux clients?

I have two end users that work remote,

PA-VM guest ethernet1/x in VMWare Workstation can't communicate with the host OS or any other hosts

My topology is as follows.

PA-VM-ESX-8.0.0.ova image was downloaded from PA support site and installed on VM

Unable to find interface configured in vm machine in vmware

I’m new to Palo Alto VM series deployment and it’s the new project .. we’re trying to deploy Palo Alto HA in VMware environment . Deployed ovf template and configured management interface . Connected to GUI and all looks ok . But I’m not able to conf...

PPTP VPN can not be connected to external devices

I have built a VPN server in company domain and I have tried to connect it in the domain computer. Now I need it can be connected to external computer. I have search many information in Internet to know how to do this setting in firewall. But it stil

Feature request thoughts - around nat selection

Hi

I have 2 NAT pools, actually 4, cause for HA each pool is doubled - does that make sense.

1 pool is on a.b.c.13 and the second is on a.b.c.113.

All good. what I would like to do is say

going out internet interface from src group "out via non prod"

DNS Proxy in Active Active cluster setup

Hi

I am looking to setup 2 IP address I want to use for DNS proxy  - I was planning on having each ip as a HA VIP - in fail over mode - 1 priotised to one node and the other to the other node

Then I tried to setup the DNS proxy -  can't attach it to

Routing issues LDAP AD server profiles

Hi, Im trying to set up Group mapping and foudn an interesting issue that I wabnted to put out here see if theres any ideas that can help us out. This is the situation:

Hardware

• ethernet1/12 is trunk with subinterfaces
• ethernet1/12.2 vlan 2 tagged subi

PA220 routing issue

I have three PA220s, let's call them

PA220-A

PA220-B

PA220-C

They are connected in the following manner:

PA220-A ---- PA220-B ----- PA220-C

All three have an Inside and Outside Interface. All the Outside interfaces are connected via a Layer2 network. M

Palo Alto change source port with communication Cloud Meraki

Hello,

We have a client with 300 branch that use Meraki. These branchs has DSL link on WAN 1 and MPLS on WAN 2.

We have a follow problem.

The meraki send a packet UDP each 10s by interface ip WAN 2, for example 10.200.2.10:3009 , the traffic goes to net