About Remo

What version of GlobalProtect Agent are you using? ... View more

In the Global Protect Portal --> Agent configuration you have the following feature:   ... View more

Do you have any more informations/details about a possible reason (provided by your firewall)? ... View more

Hi Steve   Thanks for your input. But what do you (and also the rest of the community) think of this without thinking about whats realistic and not? I know that PAN is holding the cards very close and I also know the way with asking our SE. But still, I think this would make sense. And who knows what will happen if there are enough people who also think this would be useful.   Regards, Remo ... View more

Hi everyone   I konw this discussion is very (very) old but to me it is still a very important thing. What do you think about when Palo would maintain a more current "Known Issues List"? I konw there is a list in every release notes but I think it would be much more helpful (probably to every palo customer) if there would be a list of ALL known issues which would be kept current as soon as a Bug ID is assigned to a problem? At least for me this would be very helpful and it would also reduce the effort for palo support. With such a list I were (probably) able to check in a few seconds if a problem/crash I had today is already known and I did not had to open a support case.   What do you think of that?   Regards, Remo   PS: Or am I not up to date and such a list does already exist? ... View more

did you really use the command proposed by Raido? because the output you posted here looks like you tried to ping www.google.com ... View more

https://support.paloaltonetworks.com --> Software Updates --> PAN-OS for VM-Series Base Images ... View more

Could you maybe also clarify: Is the problem with the internet access of your PA-VM or are you talking about the internet access from your LAN subnet? ... View more

Actually it's now some months ago since I last used a VMWare WS Lab but I think I had the same or similar issue.   Open the *.vmx file of your vm and check what virtual Device type your network interfaces are: Search for lines like this: ethernet1.virtualDev = "vmxnet3" When I add a new interface to the vm I get the following interface devicetype: ethernet2.virtualDev = "e1000" So if you now have all on e1000 try to change them to vmxnet3. ... View more

As far as I know Palo supports IPSec PSK's up to 255 characters with ASCII support.   Here are also some limitations with other vendors which I have been experiencing in the past:   Juniper: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%^&*()-_=+[{]}\|;:'<,.>/ MAX LENGTH: 127 CHARACTERS Fortinet Fortigate: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ MAX LENGTH: 80 CHARACTERS Cisco Systems: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ MAX LENGTH: 127 CHARACTERS Checkpoint: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ MAX LENGTH: 64 CHARACTERS Watchguard: ASCII MAX LENGTH: 63 CHARACTERS Microsoft: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ MAX LENGTH: 128 CHARACTERS PFSense: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ MAX LENGTH: 255 CHARACTERS (maybe even more)   ... View more

Did you make any progress with this problem? Normally windows computer (depending on your setup) also try to contact printservers very eary in the loginprocess or also some IP addresses of microsoft. But also depending on your specific setup there could be also some more services which lead to this long logintime. ... View more

Is your any rule really ANY (src/dst zone, src/dst ip, src user, hip, no security profiles ...) or dou you have some filed specified with a value which could be the reason why the firewall is skipping this rule? ... View more