Resolved! Best Security Firewall review

Ok, I heard that palo alto does have a service that will review a firewall configs to make sure the Best Practices and Security Practices are being down. If this is true what is the service call and has anyone use this service ?

Resolved! IP for portal and gateway in global protect

Hello Experts

Can I use different IP for portal and gateway other than IP assigned to external interface of firewall? Should I need to assign this IP also to external interface of firewall or no need?

Regrds,

GR

Resolved! Traffic processing when user information may be outdated

Hello!

Could you please expalin what's the default traffic policy when new authentication agent/AD DC info is unavailable for some reason.

Does the user-based rules get automatically turned off or someting?

Does the traffic which gets under user-based f

Resolved! policy muliple search syntax

I have a large list of IP addresses that I need to search on.  I am not necessarily interested in if these systems are getting traffic, but moreso interested if they are present in any policies.

Is there a way to search for multiple host/net objects

Resolved! Copying firewall rules from one firewall to toher

Hello Experts

We have communication between DC and there are four three firewalls in between. So for bidirectional policy, I need to create same two rules on fw1, two rules on fw2 and two rules on fw3 (the only difference is offouce zone names and po

Resolved! IP address for NAT

Hello Experts

I was checking confiugration on my PA firewall and I foud for every source and destination NAT, the public IP for NAT with /32 was assigned to external interface of firewall. In my opinion there is no need to assign public IP /32 to ext

Resolved! PA support point to multipoint IPSEC VPN?

Hello

Does PA support point to multipoint IPSEC in hub and spoke VPN envorirnmet? Means Only one tunnel interface we create on hub and through NHTB protocol, nexthop is bind to SA.

Regards,

GR

Resolved! Static bidirectional NAT or soruce/destination NAT

Hello Experts

Someone from PA told me that for public service like email server, where bidirectional NAT is required, it is best practice to use source NAT and destination NAT for the same public IP instead of using static NAT because static NAT will