Also check the VPN flow on both sides when you do a ping to check the encap/decap counters. This will help you find out which peer to focus on.   Also setup a packet-filter and use the command "show counter global filter packet-filter yes delta yes" do this command multiple times and look for drops.    Hope the above helps.    Thanks ... View more

If the route on the advertising PAN is learned via IGP and you want to advertise the IGP route to EBGP, in this case you will have to use the redistribution rule. Please choose the route you would like to advertise in the redistribution rule and set the values you would like to have for that redistributed route. Hope this helps. Thanks ... View more

Hi Rod, As far as I know there is no option to set up a client proxy server for the PC Client using GP. If you need this functionality I would suggest you to get in touch with your sales team. Thanks ... View more

Hi, The route which you want in the RIB-out is it existing in the route table? The route which you want to advertise out via BGP needs to have been learned either via a IGP routing protocol or a IBGP update from your own AS. Hope this helps. Thanks ... View more

The Host IP addresses you are trying to ping and RDP for, do these host know to reach the remote netconnect client IP address they need to be routed through the palo alto device? Also based on the zone the tunnel interface is connected to, do you have a policy to allow ping and rdp.If the policy allows the app, please ensure it is ping and not ICMP. Hope this helps. Thanks ... View more

Hi Jan, If there is a problem with the connection to the PAN agent and the user id info based on which the policy is enforced is not available then the policy used to allow the user will not work. If you happen to see this issue again then please call into support so that we can troubleshoot the issue and determine the cause of the PAN agent connectivity to the FW. Typically we would first go and check on the PAN-agent if the user id info is there and then check on the FW for the user id info as well. Based on the outputs we will have to do additional troubleshooting steps to determine where the problem lies. Thanks ... View more

Not sure if I understood your question very well but If you use PBF then if you add static routes for those lans then those will not be used. Please let us know how the link change went and if the above is what you observed? Thanks ... View more

As far as I know chaining of url via google translate will not block for both url and app-id. I would suggest to contact your system engineer to check on this and put in a feature request if it is not currently supported. Thanks ... View more

One more thing I wanted to add there was support added for this in content version 272. Incase if you are not using content 272 or above then please upgrade the content. Thanks ... View more

Ben, Can you please try the following 1) Can you also please check the threat logs or data filtering logs to see if you see any drops. 2) If you don't see any then please try to setup a policy for the android without any profiles. If #2 works then please open up a support case and let us know the link for the app and the content version and software version you are running. Hope this helps. Thanks ... View more