VPN problem with pptp and gre

Dear all,

   I use PAN500 replace linksys firewall. I have the problem with our client that use VPN client to dialup to internet VPN server device such as router. Our diagram looklike this.

Client(window XP, with MS VPN client)  --> PAN500 --> VPN serv

whois lookups

I am on OS 7.1.10 and my whois searches through the ACC never work for  me, anyone else have this issue or a resolution to the issue

Deleting VPN from iOS device

Hi All,

How do you remove Global Protect from settings an Iphone? Went into settings --> general --> then VPN. But not able to remove or delete the profile. Also checked in profile management and the VPN is not located there.

Does anyone have a solut

Custom URL Category in security rule - traffic log shows allowed with "any" in URL Category field

I've read the articles about the processes that take place when analyzing traffic and understand that sometimes there could be an allow status when it seems there shouldn't be.  However it also seems that if the traffic truly shouldn't be allowed the

Safe Search enforcement not work with Quic

On a rule with open the following service:

- service-http

- service-https

- udp-443

and with URL Filtering profile where is enabled Safe Search Enforcement

if a user use Chrome, and set up Resctricted Mode = off in youtube site, he can see any type of vid

VPN Issues (IPsec Xauth PSK) after Update to PAN OS 8.0

Good evening,

We've had an issue since we upgraded our PaloAlto 500 to Palo Alto PAN OS 8.0 a couple weeks ago.  If it helps we actually updated to PAN OS 7.1 and then 8.0; so not entirely sure if the problem occured at 7.1 first. 

Windows Global Pro

Tap and Layer 3 mode

HI

I have my PA's looking at TAP from my switches and also L3.  My thought was to look at traffic that wasn't being routed.

But I was thinking what happens to my TAP traffic if I have a policy that allow traffic from zone staff so a L3, but the PA al

How to generate a trial license for VM FW

Hi

How to generate a trial license for VM FW?

Thanks

Global Protect Question

Hi

I am having (a new ) issue with global protect. Now the support person is telling me GP is not setup to allow connection made from the client to the laptop (GP client).

I'm a bit flabber gasted. But hey I could be wrong. The guys is suggesting I n

Miner for STIX using API token

couldnt find the miner of STIX API Token type.

Below is the sample request. Appreciate any pointers to an existing miner and connfig requirement / help to create new miner.

POST /stixapi/recent HTTP/1.1

Host: ncert.nlabs.org

Content-Type: application/x-

PA SSL decryption for web traffic and squid

Hi

Where should I be doing the decryption

client -> pa (l3) -> squid -> internet

or

client -> squid -> pa (l3) -> internet

I thinking the first one, then I can also see who is making the request 

A

DHCP ISP CLIENT

Hi,

I have a DYNAMIC ISP that I will use DHCP Client on interface. I know there is option to add default GW provided by ISP, but I only want to use this default GW for a couple IPS such as peer IPSEC IP. How can I do this with out PBF

Thanks