About jhansf5

A feature request has been submitted for the import of device config into Panorama.  I encourage you to contact your Palo Alto account team and add your name to the FR. Thanks. ... View more

According to: https://live.paloaltonetworks.com/message/10099#10099 and https://live.paloaltonetworks.com/message/7904#7904 it seems that PAN currently doesnt support ECMP (Equal Cost MultiPath). But I think it should support "unequal" multipaths since this is the base of most dynamic routing protocols (only the "best" route will be loaded into the fabric and when this route fails the dynamic routing engine will select next route and load that into fabric). So your best choice is to contact your sales rep. and issue this as a feature request (dont forget to return to this thread with an update on how it goes). Regarding floating ip's those are only available (to my knowledge) in active/active setups. That is because in active/passive its the very same config thats loaded in both devices (and the unit who is currently passive is simply virtually shutdown except for the mgmt interface and HA-links). While in active/active both devices must be online and VRRP (or similar) is being used (each unit have a physical IP address and then shares one or more floating IPs). ... View more

Excellent!  Glad it is working. ... View more

Hello, We have a very good article that goes over the different types of NAT in detail with screenshots of what the security policy and the NAT policy should look like for each: If you still have trouble, you could contact your SE or support. Thanks, Jason ... View more