Viber stops working after connecting to VPN.

Hi All,

We are using Palo Alto PA-3220 (version 10.1.5) with Global Protect agent 6.0.0. When we connect Remote VPN with Global Protect every thing works except Desktop Viber application. I am not getting any hints on why the application stops work

Multiple vsys share one pair of WAN circuits?

I have 4 vsys that are currently using individual ports to connect to the WAN circuits. I need to free up ports for additional vsys, and would like a shared circuit port for the multiple vsys to use. I've tried a layer 3 interface with sub interfaces

VM Series on ESXi not receving OSPF hello packets when connected to EVE-NG

Hello,

I have set up a PA-VM version 10.2.5 on VMware ESXi as I was not able to get it to work properly on EVE-NG. On ESXi I did the following:

1. Added new Port Group to the Virtual Switch
2. Added a Network Adapter to PA-VM and associated it to the ne

GPVPN Authentication issue

Hi Team,

We have configured GP VPN with AD authentication and MFA . The AD authentication is working but the MFA is not working which is our next level authentication. So kindly help us to resolve this issue.

Also using username and password we a

Selection in a Multiple Gateway Configuration if a gw is at its limit

Hi! 

I was reading 'Gateway Priority in a Multiple Gateway Configuration'. So far, so good.

My question is - when were running multiple gateways on appliances restricted to i.e. 1000 gp clients. What happens if the best available gateway (highest pri

IPSec VPN Negotiation Issues

Dear Members,

Greeting to All!

Curranty, I'm using site to site multiple VPN configuration with Palo alto Firewall to different vendor site. All of the tunnel is working fine VPN ok.

My main problem is inside of my firewall public internet down the

Url access error

Hello Team, I am getting this error in the EDL, also confirm URL and certificate are correct.
Gone thorough this kb : https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/known-issues/known-issues-related-t

Query: SAML Integration Failed

Is there have a way or integration to use a thrid party MFA solution to login to the palo alto firewall as administrator?

Do SAML profile can be added to authentication sequence?

Furthermore, if the saml profile cannot be added to the authenticat

Segmentation Fault (Core Dumped) 22.04, Only within globalprotect CLI

I recently updated and I am unable to connect from within the globalprotect 'environment'. I am not sure what to call it.

i.e.

(base) john@pcname:~$ globalprotect
>> connect
Segmentation fault (core dumped)
(base) john@pcname:~$ globalprotect
>> help
S

High Disk Space Usage on / root partition and How To Clear

Hi Everyone,

     I got issue about "High Disk Space Usage on /root partition" on Firewall-VM300 with PAN-OS Ver. 10.2.3.

I try to do follow step in this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaJCAS

But still p

SNMPv3 Panorama Device Monitoring

I am preparing to onboard a new client that has multiple Palo Alto devices at various locations around the globe.  They do have a Panorama management system already, but what I'm curious about is if I can connect my SNMP manager to Panorama and have

Collect data on and then block file-sharing application IDs.

I'm looking for a method to collect data passing through all location firewalls on what app-id tagged traffic for "file-sharing" is passing through (such as dropbox, onedrive, gdrive, etc.) and consolidate our organize to a single filesharing service

Global Protect Always On VPN Auto Connect

Hi looking to get some feedback. 

Currently we have on-demand global protect VPN connection (user inisitates the VPN connection, puts username/password). They have full access to internet via laptop (w.o any traffic inspection) if there is no VPN t

PenTest GlobalProtect Subnet

Hello,

Our Palo GP is setup inside Azure - and it is working and serving its purpose. GP can reach everything, but not the other way around.

We can't ping GP Clients, we can't RDP to them, any traffic destined to GP Subnet has literally no logs a