General Topics

Global VPN

Hi All,

Since IOS devices has issue in global vpn due to which it cannot access the DNS define in gateway when splittunneling is enabled.Due to which user cannot access certain URL so we added them in DNS suffiex , but if we want to define the domain

Migrating Site to Site VPNs to IKEv2 & Suite B Crypto

Dears,

I have multiple site to site VPN between my branches and most of them are terminated on PAN3020 and PAN-820.

I want to upgrade them all to IKEv2 and Suite B Cryptography.

What is the recommended IKE and IPSEC proposals when moving to IKEv2 and

Need assistance with Certs and Firewall

I has been years since I have done anything with Microsoft CA so I am really struggling. 

Here is the problem:

When enabling URL filtering and I am blocking a certain site that has HTTP and HTTPS, the HTTP page will present the block page, but the HT

Panorama slowly driving me insane.

I'm wondering if anyone can explain this to me.

I've recently started working with Panorama. When I import devices I follow this process:

1. Add device, and input the serial number of the device and commit.
2. Wait for it to connect.
3. Import device configurat

Panorama Certificate question

In pamorama I created a default template with basic configuration settings for all firewalls and then create a site specific template and put them both in a template stack to apply the stack to each firewall. This way the default settings apply to al

rules to allow webinars while blocking http-audio and http-video

We block most http-audio/video in our enterprise but we allow access to webcasts/webinars. We have had to resort to create a "webinar" rule allowing http-audio and video, rtmp, rtmpe, gotowebinar, and more... with specific IP ranges. Because these ch

SIP - services only, does ALG apply?

I am troubleshooting Cisco phone registration issues through a 3020 running 7.1.7 . My rulesets are only service based (TCP/UDP 5060, 5061, etc) and allow any application.  Cisco TAC is telling me that ALG issues are interfering with registration.

If

Palo Alto ping response is slow from Cisco

A directly connected Cisco 4500 Switch Ping's to different office goes through the PA cause nearly 700-1000msec, whereas PA pinging the Server to same site has only 20msec. I understand the Ping ( and Extended ping with TOS 184) is not the exact way

How can I create a report that shows my ISP outages in a given month?

The information I'm trying to see is how often one of my ISP's goes down in a given week/month.

I have dual ISP's so I use PBF rules to failover. I currently have a system log setting to email me when a PBF rule is triggered (subtype eq pbf). But I d

Active Active Setup PA-500

Hello

Could someone direct me or provide me with instructions on setting up twp PA-500's in an Active Active configuration?

Much appreciated and Thank You

How vulnerability profiles work

Hi Guys,

Please need your supprt in understanding how  vulnerability profiles work or in general how security profiles work.

I have done a lot of studying in this regard and all they say is that it works on the basis of signatures.Below is my understan