About doug-elliott

If the PA-3020 is at pan-os 9.1 and the PA-460 minimum pan-os is 10.2, would you not need to account for configuration differences by migrating with Expedition using the PA-460 as a base cfg?  botnet config lines as an example are introduced and move within the cfg depending on the version.  ... View more

Planning a SonicWall (SW) migration.  Putting this method in my toolbox.  Would beat a manual build on a Day1 cfg.  I was h oping to get the policies out of the SonicWall into csv format and manipulate for use.  From a July 2020 SW forum post, " Access rules export is available by default from next generation firewalls (Gen 7)"   I don't think I have Gen 7 SWs but still gathering info. Also in the post, the "MySonicwall tool" will convert a SW cfg backup into text file.  I found the online SW Migration tool but I think the MySonicwall tool requires a support logon.  Thanks KenLynch. ... View more

Is there a status on this fix? ... View more

I used this document -- https://supportcases.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK -- and instead of "none" for username in the cert profile, I used `Subject'. ... View more

UPDATE:  TAC response. For remote user authentication to GlobalProtect portals and gateways, the firewall integrates with MFA vendors using RADIUS and SAML only. As of now, The Google authenticator app is not supported by Palo Alto for multi-factor authentication. Supported MFA vendors are Okta, PingID, RSA token, DUO. Below document explains about the Multi Factor authentication in detail. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmSm https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/authentication-types/multi-factor-authentication ... View more