Problem Global Protect Behind NAT

Hello I have the following scenario:

-PA-3020 Edge Firewall who provide as internet access

-PA-200 LAN Firewall behind PA-3020

We are triying to configure Global Protect access for GP-200.

-I have a fqdn for the portal and gateway access which resolve

Commit failed with error "Have to specify one of source or Source-v6 address for netflow"

Hi Team,

I am trying to import a firewall for the first time to panorama. I have done many before this but the error this time is new. When I try to push config to firewall which I am trying to import, below message is showned for failure of commit.

Strange Behavior with SIP traffic related to ALG

I'm running into an issue where specific NAT and Security policy names or numbers change then the SIP traffic stops working. I found that if I clear the sessions post change then everything starts working again. I believe this is related to ALG, lik

Packet Capture filters not correct

I have a problem once in a while where packet capture filters are not working.  I set up the filters at one point and if I delete the filters and set up a new filter.  Turn packet capture back on and it still gives me captures of the old filter.  I c

How to copy from just the right side of the Preview Changes diff window?

In PAN 6.1 if I go to Commit and click Preview Changes - I have the old on the left and the new 

on the right. The problem is that I want to copy the text from the right side of that screen 

and not the left. Is there any handy trick that would allow m

Getting old PA-200 back in IT life

Hello

i inherited on PA-200 on my new job and want to get it back on IT life. While booting i observed the CLI and this is what i got. Needless to say i have no responces to any command entered.

Is anyone abel to provide some info how to set it up agai

Traffic Logs - Multiple IP's

Hi,

Is there an easy way to monitor traffic logs on say 20 IP's to see if any IOC's are being hit? I'm guessing I could build a filter for each IP but I was hoping there might be a way to do it easier. These are not contiguous IP's so CIDR won't help

PAN-OS 8.0.2 URL logs not showing up

Hi guys,

I'm running a new PA-VM-50 on 8.0.2 within Esxi.  The VM is fully licensed and has all the latest dynamic updates and URL filtering db.

VM License - VM-50
VM Mode - VMWare ESXi
Software Version- 8.0.2
GlobalProtect Agent - 0.0.0
Application Vers

SSL decryption for email

Hi,

Do we need to enable SSL decryption simply for reading SMTP messages?

We have created a profile under Objects and attached it to incoming mail policy but attachments with extension dll, bat, exe file all get through and see nothing in Wildfire su

Config .XML in the config bundle is empty

Hi everybody!

I have a little issue with which maybe you can help me: I have a HA with a pair of 3060s among other FWs managed by a Panorama, when exporting a config bundle from the Panorama, the config XML file for the pair of 3060s is empty. What

Panorama VM - 8.0.x - How long can we run in Legacy Mode?

We currently have a Panorama virtual machine with 2TB of storage runnint 7.1.x.  I know there are changes to the log database in 8.0.x.  We also have some newer PA firewalls that only run 8.0.x, so we would like to upgrade Panorama.  How long can we