About Remo

Hi @chuckles    As mentionned by @Mick_Ball, yes you can manage the device without the mgmt port. But in addition to the described things in case of problems on the dataplane you will no longer be able to manage the firewall (except if you are able to connect remotely to the console port). In addition to that I would also recommend to use the management port because of security reasons, as you could logically place the managementnport behind another dedicated management firewall for example. ... View more

SE = Sales Engineer In this case I think you need to ask the responsible firewall administrators in your company as they should know the PaloAlto SEs. ... View more

Hi @calasyr    Reach out to your SE to have her/him create a feature request.   Regards, Remo ... View more

@El-ahrairah wrote: I've arranged an FR for an issue I raised in a post here a few weeks back to allow for Static route path monitoring to be done using the FIB as opposed to being locked to the gateway of the route itself. 11524   This is my OP which outlines the issue which this resolves. https://live.paloaltonetworks.com/t5/General-Topics/Route-Monitoring-Possible-FR/m-p/257932#M73180 FR ID 11524 is added to the list. Thanks @El-ahrairah for sharing. ... View more

PS: The first question support ia probably asking is: Did you delete cookies and cache or try another browser? Maybe this already helps without asking support for help (last week I had the same problem where only support was able to help by changing something with my permissions on the website) ... View more

Hi @CoreyS    Do you have networks behind the firewalls, where you want to have them connected over the VPN tunnel? The problem in your configuration is that you route the peer IPs to the tunnel interfaces. This way the firewalls try to reach these IPs over an interface which has no connection at that time (the VPN connection is not established). The firewalls need to connect to the peer IPs over the internet and not over the tunnel. When the tunnel is established then you can have connections between the internal networks over the tunnel.   Hope this helps, Remo ... View more

Hi @bhughesiii    For a start with paloalto you chose a challenging project 😉 What you are asking for is possible. To start with this read the following documents: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/user-id/map-ip-addresses-to-users/map-ip-addresses-to-usernames-using-captive-portal/configure-captive-portal.html https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-new-features/globalprotect-features/authentication-policy-and-multi-factor-authentication-for-globalprotect https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/authentication/configure-globalprotect-to-facilitate-multi-factor-authentication-notifications.html   Depending on the authentication method and if you use MFA GlobalProtect will guide the user through the authentication process or display an URL that leads to the captive portal website where the user is required to authenticate.   Hope this helps. Regards, Remo   ... View more

Hi @RicardoNeira    I son't know exactly the answer to your question, but if you do an snmpwalk query against the firewall you should see all values that are available on your VM. With tools like ireasoning mib browser you could import the PA mibs to display all required informations/descriptions for thw values returned by the snmpwalk.   ... View more