Intermittent Aged-Out Traffic

I am hitting an issue where sessions are ending for the reason "aged-out".  Go figure the problem doesn't present itself readily when I have Support on the line.

The Setup: I have two ISPs.  One (I'll call it SummitNet) is an asymmetrical 30Mbps up /

ASA 5510 VPN

I want to replace a IKE1 VPN serviced by a ASA 5510 with a  IKE2 VPN serviced by the palo alto what i the best approach?

Cisco SFP+ Twinax Copper Cables to PA-5050

Hello.

Has anyone tried connecting Cisco SFP+ Twinax Copper Cables (sfp-h10gb-cu1m) to PA-5050 device? I've tried to find some info about it on PA KB but wasn't successful. Is there any document issued by PA listing all the supported 3rd party devices

Filter incoming routes in RIP

How can I filter the routes that are learned through RIP ?, I am learning 200 routes, but I only need 2.

Hub and Spoke IPsec VPN design with Dynamic Routing

Looking to properly setup Dynamic Routing over a hub and spoke IPsec VPN network. The hub will have 40-50 spokes.  The Hub is running a PA-820.  Spokes will be PA-220.  Voice and data traffic.  There will be minimal traffic between spokes.  My questi

Global protect users dont pass authentication

Hello all

we have PA in production.The problem is VPN users dont pass by certain authentication profile.The issue is that when we point user it is ok but when we point some group it fails to authenticate

we test through CLI and that is result

test auth

Very Slow Commits

Anyone who's used Palo's since the early days may roll their eyes at this question..!

We have a bunch of 3020's and one can take an age to perform commits; for example this morning we performed 4 - the first 2 took <30 seconds, the 3rd took >10 minut

UserID Reporting Computer Names

Quick question.

We are having some issues where a users' computer name i.e. acme\pc01$ is being reported by UserID rather than the user i.e. acme\jbloggs.

Anyone seen this before and\or advice what it could be?

We have a horendously complicated UserI

Kerberos SSO with Globalprotect and User-Logon

Hi Community,

I have a strange problem with Kerberos SSO and Globalprotect 4.0.7:

I set up Kerberos SSO and the SSO is working.

If you connect to the Globalprotect-Portal via browser, you directly get a Kerberos ticket and the SSO works.

If you logout

WildFire API with WebRequest

Hi Everyone,

I am trying to use WebRequest (microsoft .net ) class to  get report about a sample via WildFire API. The only thing I got is an error "(420) insufficient arguments". In my posted data, the apikey, hash and format are all included. Is th

User activity report

Hi Team,

Customer trying to utilize Palo Alto to generate user activity reports that show detailed web browsing. I understand from other articles (https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/monitoring/view-and-manage-reports/gene