Panorama licensing

I think that this is simple but I am just missing it. I am looking for what my license limitations for my Panorama are. I have looked on my support site and googled it but I seem to be unable to find it.

Essentially I have a number of devices currentl

Overlapping Subnets and NAT

Hello,

I have a new client we have a direct L3 link with. Our firewall has an existing directly connected interface on the 10.10.0.0/16 subnet. Our client also has a subnet of 10.10.0.0/16 which we need to get to.

During my initial testing I decided

Issues with ipsec traffic from PA3020 to Cisco 871.

I have a working tunnel between Netscreen and Cisco 871. I tried to move this from Netscreen to PA3020.

The tunnel comes up. PA3020-local network-192.168.2.0/24 and remote-192.168.235.0/24.

Traffic from 2.0(palo side) to 235.0(cisco side) network is fi

What's new in MineMeld 0.9.36

Release Date: 2017-03-21

How to update: Updating MineMeld

Nodes

• JSON Miner now supports Basic Auth via prototype (suggested by @Kimwii)
• TAXII Miner now supports subscription_id, client cert support has been improved, added support for LinkObjectTy

Global Protect: Two preferred NIC listed

Windows 7 laptops with global protect client installed.

When I plug my laptop into a wired(ethernet) connection, the wireless IP and the wired IP are showing up as preferred. If I remove global protect from these laptops the wireless IP goes away whe

Created new certificate for decrypt, now I can't commit because of global protect error

Hello everyone,

I created a new certificate for SSL proxy and now for some reason I cannot commit. The error I get is "error applying transform globalprotect-pre-transform.xsl to config tree", AFAIK there was/is a completely different certificate for

QoS theory / functionality

Hi,

We have an interface which is 100Mbps. There will never be more than 20 IP addresses connecting on this interface.

I wish to guarantee each connection 5Mbps and allow them to use the entire 100Mbps if the additional bandwidth is available.

I can

DNS traffic identified as sophos-live-protection

Some DNS traffic is classified as sophos-live-protection in our traffic logs. Has anyone else seen this? I only have logs 5 days back in time, so I cannot say when this started but it wasn't with the latest apps update. Our firewall is PA-5050 runnin

Globalprotect client

I want to do some testing on new global protect clients but I don't want to make it update anyone tell I can test it, How do I get the software to test with out making it the default cleint on the firewall?