panMgmtPanorama2Connected custom poller = Not-Connected

can someone tell me how can we troubleshoot palo alto firewall disconnection from Panorama. I tried to check system logs but there are no enough logs to troubleshoot it. 

logs

FW has lost connection to panorama, no log will be forwarded

Disconnected fr

SSL Forward Proxy Decryption with ECDSA Cert?

Just wondering if it's possible to use an Elliptical Curve DSA cert with CA and Trusted Root to be the Forward Trust Certificate for the SSL Forward Proxy decryption feature? 

Reading about the Perfect Forward Secrecy feature here:

https://www.paloalt

user-ID user mapping problems

Our PA 4.1 has problems mapping entries received from user-ID agent and LDAP queries.

show user ip-user-mapping command produces following output:

192.168.1.1 AD        grybai\vltr12345678

Here grybai is our NetBIOS domain name for domain and  vltr1234

GlobalProtect VPN on a Mac with multiple user accounts - privacy for other users?

I have a Mac with two user accounts (one work, one personal).  I have installed the GlobalProtect VPN client. Can my employer get access to any of the data in my "personal User Account" if I install and connect with the GlobalProtect VPN client when

Block "internet-communications-and-telephony" but allow Skype4Business connections

Hi community

Has anyone of you already had to deal with a request to generally block the URL category "internet communications and telephony" but at the same time allow connections to Skype for Business services of other companies?

The only way I can

Guide to FTPS?

One of our partners is switching it's service to FTPS,

Does anyone know of a decent guide on implementing FTPS? I saw a brife article by "sdurga" but it's not very detailed.

We don't presently do any SSL decryption so unsure of what we need to do and

TRAPS Logs 4.1.2 to panorama 8.0

Hello, I have tried push logs to panorama by KB link but I have still same error message "Connection to pan.xxx.xx:23001 failed.
I am using TCP 23001 without SSL
Do someone have same problem?

https://www.paloaltonetworks.com/documentation/41/endpoint/e

How to limit global protect for specific android/ios users?

I have an interesting scenario. We have windows users accessing global protect. I am looking to buy gateway license to enable a set of users(10) out of 400 users to use android/iphone to connect to vpn. We  have IBM MaaS360 MDM installed on phone to

Tunnel Monitor

Hi Members

While setting up the Tunnel monitor, what would the destination IP on the ipsec tunnel. Is it the IP of the peer? and where does the alert gets generated, within the PA system logs?

Regards,

How can I get user to type username, password and OTP when using RSA Radius 8,1 on Global Protect ?

Hi,

How can I get user to type username, password and OTP when using RSA Radius 8,1 on Global Protect ?

Portal = Radius (RSA) passes -> LDAP check

Thanks