About hamza_ineos

thank you very much brothers i still have some questions plz, we have 2 scénarios in our deployment:   1-creating the vlan in PaloAlto firwall, and then manage it from the firewall. 2-or create the vlans on the cisco switch, in this case can the firwall apply the security rule on the vlans created in cisco switch ? (Important question).   witch of the this 2 sénarios is the best practice ??  plz if it's possible give me what the advantage/disadvantage of creating vlan on paloalto and not on cisco switch !! and what  the  advantage/ disadvantage of creating vlan on cisco switch and not on paloalto !!     ... View more

thank you very brother you are the best 😘 it's working now anyway i'll test some other config and lab if i need some help i'll contact you bro   Thanks a lot Mick ... View more

Miclball, yes you are right, it was a port forwording problem, also a ceritificate problem, i configured the port forwording, and i run the adsl wan interface certificate on globalprotect Portal&getway (cos it gave a certificate error). Now i can connect to my local network from the external, but i can't get access to the ressources. exemple i cant ping to 172.16.17.2 or 10.66.13.251   ... View more

yes i did , but also doesn't work, i think i must run the certificate created for the 41.137.99.xx in glbalprotect portal/getway ?? ... View more