Static Route Removal

Default route via ISP-A (primary) has not yet recovered, even though the monitored IP address (DNS server of ISP-A) is already rechable via the interface connected to ISP-A router. (tested via ping source x.x.x.x host y.y.y.y)

I have seen the logs fr

PNCSE practice questions I don't get at all...

Hello

So I'm preparing taking the PNCSE 8.0 certification exam.
as part of my prep I took the practice exam on the palo alto site.
it went fairly well( 16 wrong, so failed) however an emergency came up so I rushed through and later in reviewing I found

Supported PA OS Release

Hello,

Does anyone know what the recommended PA software release is right now? Specfically I am curious to know when the 8.0.x code becomes recommended.

Video - Installing MineMeld on VMWare desktop

New video, about installing MineMeld on VMWare dekstop:

https://paloaltonetworks.box.com/s/ke4ll5sc6b751czlconury05l99clggi

(music by Eric Skiff)

Anyone know if the migration tool can split ASA Multi-context in seperate VSYSs on PAN?

Hi,

Anyone know if the migration tool can split ASA Multi-context in seperate VSYSs on PAN? 

Thanks

MFA auth page not presenting instead I see basic Captive Portal web-form login

I have an odd issue where when I get the prompt from Global Protect saying "You have attempted to access a protected resource please click the link to authenticate" I am brought to the basic (not pretty) looking Captive Portal web-form login page and

Global protect client to connect using a IPSec tunnel

I want to create a IPSec tunnel and use the global protect client to access via VPN our PCI internet network can that be done?

Output limit?

Matching Dynamic IP

I hope the brilliant minds here can answer my question

I have a situation where I need to change NAT to translate in a specific way, I am looking at how the PA's behavior specific to how it selects IP address in a NAT pool based on the mask.

Here is

Are Multiple Virtual Routers needed for BGP peering with multiple local AS numbers?

Hi everyone,

I have a situation where a location has 2 MPLS circuits. On one MPLS circuit, the local ASN is 65136. On the other, the local ASN is 7014. Is it possible to peer with both providers using the same Virtual router, or would I need to creat

Palo Alto not loading certain valid sites, why?

Having another issue with these things (ready to throw them out the window in all honesty). 

Seems as though a couple sites simply won't load when routed through a pair of HA-3020s.  Of course Palo Alto support does a packet capture and sees no drops