Internal traffic is hitting in the isp firewall

Palo alto is perimeter to customer which is connected to isp firewall.

Internal subnet traffics which are not allowed in isp/ untrust interface are hitted in isp firewall.
Routing is proper. ARP is proper in isp interface( only next hop arp is there)

Im...

From the Experts: URL filtering implementation and troubleshooting

I just wanted to check with anyone that can answer, that when the URL license expires, the whole feature is disabled in PanOS 8.0.1. It used to be different, the URL filtering would still work, but there were no more updates of the database.

Thanks!

PA-220 Aggregate Interface with LACP supported?

Hi,

I need to confirm whether the PA-220 is able to aggregate 2 interfaces or more in a LAG (LACP).

I was able to find out that the PA-200 does not support aggregating interfaces with LACP, but the PA-220 is rather new and I have not been able to fin

Web Filtering and Reporting

I have been tweeking reports on these Palos we purchases (3020) and trying to find a good Web Browsing/Filtering report to provide for senior management that will encompass top xx users with most visited external sites, preferrably with the duration

What services are used by the Management port?

We have been tasked to follow the CIS benchmark for our Palo Alto firewalls. One item is to limit access to specific IP addresses for the Management port. That is easy enough if the only thing using the management port was users connecting to manage

Panorama shared objects

Hi

I am about to import my config from a PA into panorama. 

Now with shared objects, how do you manage them, can you delete them, I haven't found a way to do it via the web ui

How do change it from shared to non shared or the reverse ?

native VPN for Iphone on Pan os 8.0.2

Hello everyone, recently, i have access the acces for a palo alto Pa 500 i made the upgrade from 7.1.8 to 8.0.2, but now i need to do the configuration for a native vpn, for conect some iphone´s, but i dont have idea how to do this,  there is anyone

Decryption Issue

Hello All,

Need help

1. Decryption is not working in IOS device

2. Outlook is not working in Android via decryption

PAN 5050 Migration to PAN 5220

We are planning a migration from hardware 5050 to 5220. The PANOS migration will be from 6.1.16 to 8.0.2 (oe whatever 8.x version installed on the new 5220 hardware).

I am looking for advise for the upgrade process. 

Active Directory Authentication for GlobalProtect issue

Hi !

Currently, I am using GlobalProtect in my network.

Also, I am configuring an Active Directory Server, and I would like to use AD users to connect to GlobalProtect (currently I'm using local users / groups in the firewall). Computers are not in th