General Topics

Resolved! IPSEC VPN ECMP - Issue

Dear Collegues,

Let imagine the following situation:

PA Firewall connected to two ISP, e1/1 - 1.1.1.1 and e1/4 - 2.2.2.2.

Default virtual router with ECMP configured with weights e1/1-50 and e1/4-50.

IPSEC tunnel configured to the remote site, IKE Gat

Resolved! Newb Question: Searching Security Policies by Name (w/ Filter Operators)

Hello!

Brand new to PAN, but diving into it as part of onboarding at with a new employer. 

Our company has quite a few security policies (169) compared to the scale of networks I'm used to managing in my past roles (maybe 6-12 on the high end!). So,

Resolved! Active/Active failback

Hi,

We are looking at deploying an A/A L3 cluster with dynamic routing (has to be A/A to satisfy requirements of the existing setup). We've pinned all the routing preferences and floating IP priorities to 'unit A'. We are new A/A so any help with the

Resolved! Enabling a Systems Maintenance page for systems at the PA?

Hi folks,

We have a public IP that NATs to an internal Barracuda Load Balancer VIP that represents several sites, content rules, etc.

I am being asked if we could temporarily change the NAT translation at the firewall to redirect to a maintenance page

Resolved! PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256

I need to move a tunnel from a PAN with 6.1.10. The tunnel today uses aes256 for IPSec crypto and for IKE. The tunnel established fine to our biz partner.

In configuring the tunnel on the other PAN with 7.1.9 I notice that my options are aes-256-cbc

Resolved! Configuring destination NAT with DHCP public IP

I only get a dynamic public IP from the ISP on the outside interface of the PAN box. I'd like to configure Destination NAT to use the single public IP for number of servers running inside network on different ports. I've followed the documentation on

Resolved! Per-User URL Filtering Process

Can someone give me a break down of what the process flow is like?  For example, Is a lookup done for the user then an IP mapping happens?  Are the user-ip mappings being used for the decision in the filtering process?

The reason I ask is that I have

Resolved! Security policy conflicts between the Application and Services?

Hi all.  I am playing with security policy, and seeing a result that I am not expected.

Basically I would like to allow connection from the Local (trusted) zone to a specific server in the DMZ zone to allow port 443 (ssl) traffic only

In the Source sec