Global Protect and Bandwidth Considerations

Looking for feedback on what you all have experienced with GP VPN for a user count of over 2k users. 

Specifically what type of INet circuits that were needed.  What was the amount of bandwithd which was seen on the circuits?  Finally, is there any s

Global Protect logging out right after it logs in

On the PAN 5020 I can see in logging that user successfully authenticates with MFA and radius but within a second it says the user has logged off. I know that in fact the user did not log off. I hope to grab some logs at the client next week. But I f

Site to Site VPN supported on Unlicensed VM-Series Firewall (?)

I am aware of the below limitation when using an Unlicensed VM-Series Firewall:

https://live.paloaltonetworks.com/t5/VM-Series-Articles/No-Logging-in-Unlicensed-VM-Series-Firewall/ta-p/66123

Are site to site VPNs fully supported when using an Unlicen

30 Day Trial License Expire

Hi guys,

We have been used 30 Days trial ULR Filtering License so far.

After 30 days, it means expired, We couldn't use it naturally.

and I tought it may can use old db version-url filtering- even though It won't get any update information as like norma

Application issues Via VPN with Peer

Hi Guys,

I need some help dealing with CyberAck over VPN. The problem is that I created and established a VPN with a remote peer for CyberAck traffic. Service is Any but application is default. Traffic is allowed via the firewall but I get an error (

GlobalProtect and Microsoft NCSI

When users are connected to GP they are unable to search online templates from both word and visio.

it works OK when connected to LAN and we have a test policy that allows all outgoing traffic for myself and I still cannot search the online templates

How to configure PA with an MPLS circuit

I am looking for documentation on using MPLS with my PA 3050. I have found community article 59127 but was hoping for more information.

 We are about to aquire an MPLS circuit from our ISP for a remote office. The remote office will have seperate VLAN

do Palo Alto kill the connection in real time?

Hello all.is there any possibility in Palo Alto to kill connection in real time if i see for example some user downloads too much or uploads too much?

Panorama Log Storage Calculation

Ok so I guess my logs dont even collect for 24 hours due to my log storage being about 7GB. Silly people who set this up I swear. So I am trying to figure out how much I do need. 

I have a PA-500, PA-820, PA-3050 (x2, they are HA pair) and a PA-3020.

Unable to poll palo VMs .

I can poll PA200 via prtg(network mgmt) but am not able to poll PA- VM firewall via same.

Applications and their Risk Level value

How does Palo Alto classify the applications risk level? I am looking into general applications that are used everyday by lots of people that have Risk level 4 and the application research center gives me this: