Show how long the VPN site-to-site tunnel is up

Hi everybody,

Is there any CLI command or log that show the time of the tunel VPN (phase 1, phase 2 or both of them) is up?

The commands:

show vpn ike-sa gateway <gateway name>

show vpn ipsec-sa tunnel <tunnel name>

It shows the lifetime since the last

How to Block all countries

I am trying to make a policy on my new PA-220 and i want to block all traffic coming in from every country except the united states..I can't figure out how to do that except by blocking every country one country at a time.. Can anyone tell me if ther

Globalprotect IPSec crypto

A couple of questions 

1. Is the IPSec crypto for global protect completely separate for the IPSec crypto option that you find lower down in the list on the firewall?

2. Is the Globalprotect IPSec crypto still used when x-auth is turned on?

The FW Can not match User based Rule when users were changed IP in using GP internal Gateway.

My customer uses GP Internal Gateway with a non-Tunnel mode.

It means it uses just only user authentication and enforces user-based rules.

I am facing an issue .

A user was connected to GP Internal  GW in office 1F and successed authentication.

The FW w

how to write a simple miner documentation

Hi there,

   I'm a new user, so hopefully this is a simple question.

I installed minemeld via source code on ubuntu 14.04 using the instructions on this page : 

https://github.com/PaloAltoNetworks/minemeld-ansible

 The installation went smoothly

Allowing access to news channels but block videos inside the channels

Hi All ,

Can any one please confirm , can we able to block videos streaming inside a website and allowing the access to the site with palo alto.?

Tried to create a decryption for the traffic and also blocked video streaming but it didn't helped.

Plea

Pro active monitoring for routing table

Hello,

We have faced problem where routing table is full and we had an outage where customer were unable to access Internet for specific sites.

We asked for syslog or SNMP traps on it but we received as of now, there is no provision to monitor it

OpenVPN to a server behind PA

I have a dest NAT setup with port translation thus:

untrust untrust public IP tcp 443 > private IP tcp 1194

Policy set as

untrust trust any src to public IP for 443.

The NAT works fine, but I see aged-out on the traffic monitor, and no traffic at all o

GlobalProtect Users appear on GUI and not on CLI

PANOS 8.0.5

File minemeld-web.conf doesn`t exist

I`m looking for file minemeld-web.conf  into /etc/nginx/sites-available/minemeld-web.conf  directory but it doesnt exist, there`s only default file.

I need to change HTTPS services to HTTP

I installed the super fast setup from the site https://live.p

Licence NFR PaloAlto

Hello

I just receive my PA-850, i made the registration of the device in support section, but after this registration, i can't see the licences for the new device :