Site-to-Site VPN with Static and Dynamic Routing

I read the following article about Site to Site VPN With Static and Dynamic Routing.

https://docs.paloaltonetworks.com/network-security/ipsec-vpn/administration/site-to-site-vpn-quick-configs/site-to-site-vpn-with-static-and-dynamic-routing 

Th

Wrong Geo location

Hello, couple times we had issue with wrong geolocation. It is very interesting how PaloAlto create ip<->location database.

example: 

from FW:

show location ip 46.8.61.78

46.8.61.78
Czech Republic

regarding https://knowledgebase.paloaltonetworks.com

GRE Tunnel and Multicast Traffic

Hi Everyone,

Hi Team,

We have been trying to configure GRE tunnel. From the configuration end, everything seems fine and we have already followed the official KBs but GRE tunnel nevers gets up. And this is affecting our multicast traffic flow. Same

DNS Security cloud service connection refused

we facing problem since this morning 

DNS Security cloud service connection refused

is this any global outage.

Thanks

Naeem

PA-450R supported SFP

Hi Chapms,

Can you pls let me know if the PA-450R support the following.

PAN-SFP-LX

PAN-SFP-SX

PAN-SFP-100BASE-FX

SSL Termination at Palo Alto NGFW

Can Palo Alto NGFW support SSL Termination
ConsumerAPP (2Way SSL) --> Palo Alto NGFW support --> (1Way) to Service provider

Documentation on the setting "Software Cut Through"

Hi,

   I can't seem to find any info on the setting "Software Cut Through". It's currently set to true on our PA-460. Would that affect the performance of our firewall ?

Thank you,

Antonio

Palo Alto (KVM) VM-Series 30-day free trial Issues

Hello Team, 

Please I need help installing the KVM series NGFW evaluation copy on my laptop running EVE-NG on top of VMware workstation.

I tried installing it, however it started showing errors and will not allow me login using the default username/p

Custom Log Format when sending to Kiwi Syslog

Has anyone configured or have the format that makes traffic logs look more readable when sending to kiwi syslog?

PA-3260 best equivalent model

We need to replace our current Paloalto firewall device which is PA-3260 ,so  what is best equivalent model. 

Demystifying the SSL Decryption on Palo Alto Firewall

On Palo Alto Firewall there are two ways to do SSL Decryption (two actions in the Decryption Policy).

SSL Forward Proxy: for outbound connection (from an inside PC to an external server).

• Used for traffic to external servers
• PA Firewall splits the

Interzone Default Logging not logging

I have enabled logging but it doesn't work.

default-security-rules {
rules {
interzone-default 22c86a38-051f-4d34-9fba-e1867d4830a3 {
action deny;
log-start no;
log-end yes;

It shows it was hit twice. (see attached image)

URL Filtering to block Facebook

Hi all,

I been testing to do URL filtering with whitelist approach (allow some URL and block everything) and also create SSL decrypt policy. As I was checking, it seems like not working to block facebook. I check in the test a site, Facebook fall u