Do we have to reinstall globalProtect after a gateway cert was renewed

Recently we renewed the gateway cert, after that, a few colleagues have to reinstall the globalProtect agent, otherwise he/she will get error message "gateway certificate is invalid".

BTW, we use self-signed certificate.

Is there anyother way could f

Panorama not Pushing out PANDB updates to all Firewalls

The panorama updates devices with Wildfire update, Threats and Apps, and AntiVirus but does not push out PANDB updates. The licenses are valid.  So all licensing is updated by Panorama except URL Filtering, any ideas?

HELP - Computers with two network adapters

Hello,

I have a network with a few computers with two network adapters

NIC1 to the main netwrok 1.1.0.0/16

NIC2 to the backup network 1.2.0.0/16

We are detecting the lost of connection every few minutes.

It's necesary any special configuration to allo

DUO MFA for Clientless VPN

Hi. Did anyone know if it is possible to use MFA (for examlpe with DUO) for Global Protect Clientless VPN?

Best regards, Markus

Blocking access to Consumer gmail accounts, but allow Google Apps

According to Google, the only way to block access to consumer gmail accounts, is to intercept the traffic, and insert a HTTP header for all traffic going to google.com.  Obviously PAN-OS can perform SSL inspection, but can it do the HTTP header inser

Configuration Migration

Hello to all and sorry if this has been posted before. We are new to Palo Alto Networks Firewall. We are in the process of procurring and installing our first PAN device. With that in mind we do have quite a bit of experience with Cisco ASA FW but no

Custom Application Signatures

Curious if anyone is successfully using the commvault application within their Palo Alto application policies? We tried it and it is not working at all to detect our CommVault application traffic. The details on the application itself seem quite old.

speedtest.net giving different results VM vs. PA-220

after switching from a PA VM on an ESX to a PA-220 i noticed a huge decrease in throughput from speedtest.net - with the VM in vwire or l2 mode i am getting rates consistent with native line speed (around 500Mbit/s down and 250Mbit/s upload). With th

Global Protect 4.1 Password Length

Is there a password limit to the new Global Protect client 4.1 for Windows?  It seems to stop at 20 characters.  It made me chuckle to think that PA was limiting the number of characters we can use.

Thanks,

   Steve