GlobalProtect HIP not identifying products.

Hi.

I have two different HA-pairs with GP VPN configured on them. I'm trying to get HIP to work on the client, but I'm running into issues.

First issue is there are a number of applications we're checking for including Dell Kace and Comodo AV Suite a

Group Mapping

Included Groups under Group Include list showing full LDAP distinguished name. Would someone be able to advise how to configure a firewall to display "DomainName\GroupName" instead? 

Thank you

Marek

FQDN object refreshes attempted even after objects deleted

I have pair of 2000 series firewall running on PAN-OS version 7.1.7. we have deleted the below FQDN objects from the PA(objects and policies), but still its refreshing and querying the DNS server through the managment interface. i cannot find any kno

Palo Alto Networks - Training Resources Available

I have put together a list of resourcers that are available online to learn and improve your skills on the Palo Alto Networks platform.

Palo Alto Networks – Learning Center

https://paloaltonetworks.csod.com/LMS/catalog/Welcome.aspx?tab_page_id=-67&tab

Syslog-ng issue

I have a Kiwi Syslog-ng server reachable from Palo Alto Firewall MGMT interfaces. I generated a Self-signed Cert on PA Firewall and imported that into Windows' store for use in Secure TCP (SSL) communication in kiwi Syslog Server....but the firewall

Activate logging

Hi,
I can't view in my Kiwi Syslog the traffic from my outside interface.
In my PA-500 I've enabled SNMP in Device -> Management ->Management Interface Settings -> Permitted SNMP Service.
In Operations -> SNMP Setup -> activeted Use Event-Specific Trap

Microsoft glitch

anyone aware of  Minemeld downloading a blank FQDN file then passing it to Palo Alto?

for ofcie365, for whatever reason Minemeld is unaware that Microsoft has a glitch and the FQDN file is blank.

Would either Minemeld or the Palo Alto’s have a

PA-VM Cannot ping eth1/2 internal interface

Hi Guys,

I am running a PA VM with a VM-100 license on vmware workstation 12.5. 

I have the mgmt interface bridged to my network and can access the PA GUI, CLI and the internet. 

For my internal interface i have setup eth 1/2 to vmnet3 and unchecked

ASK: PAN-GP Clients can't reach each other

Hi All,

My GPClients can't communicate to each other, while the intrazone policy is permit.

Anyone has any idea about it?