About chuckles

@xuserjam  Do you see arp entries for these hosts in the 10.0.0.0/24 subnet on the firewall? Do these IPs respond to ping? Are you able to ping these IPs directly from the firewall?  ... View more

@chuckles, You just need to go to the support.paloaltonetworks.com site and login. There you'll find all of the dynamic updates and software updates that you actually need for this. As for the content update, you'll simply download the the Apps + Threats bundle and install the latest version (8374-6538 at the moment). You should take the time to install the updates to the other dynamic updates that you have subscriptions for as well; if you're paying for those subscriptions and never updating them you're just throwing money in the garbage.      All of these updates can be done offline without issue, as you never really require an internet connection to do any of it. It certainly helps make the process quicker, but it's not a requirement.  ... View more

@chuckles,   If you need certificate signed by CA (e.g. DigiCert), you need to generate CSR (Certificate Signing Request). You can generate CSR from Palo Alto device. Once you generate CSR, export CSR file and give it to third party CA. CA will give you signed certificate.   Once you have certificate file, you need to import it on Palo Alto. This certificate then can be used for your use case. Kindly refer below KB article for CSR generation steps on PA device.   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSxCAK   Hope it helps! Mayur ... View more

Yes, the Public IP. ... View more