About SutareMayur

Hi @RobertShawver , You should be able to check IP under firewall where EDL is configured. You can check it under List Entries And Exceptions tab.     Hope it helps! ... View more

Hi @Sujanya ,   Palo Alto firewalls do not support Policy Based VPN. So in case of Palo Alto firewalls, you need to point routes for the VPN dests to the desired tunnel interface. If you peer end is configured as Policy Based VPN then you need to configure Proxy-IDs whenever you will configure tunnel between Palo Alto firewall and the peer which is configured as Policy Based VPN. The policies configured for the interesting traffic will be serve as a Proxy-IDs in Palo Alto firewalls.   These reference articles will help you more.  Proxy-IDs details IPSEC Configuration steps   Hope it helps! ... View more

Hi @IsrarAhmed If you have valid Palo Alto support account then you should be able to download it from the site.   Hope it helps! ... View more

Hi @AGWilliams ,   If your firewall is ready with the GP configuration, you can download client as given here and test the connection.     Hope it helps! ... View more

@jeromecarrier  I do not see any issues on configuring the IPSEC tunnel between your DC and Azure PAs as at the end, it will be tunnel between your DC and the Palo Alto only. You just need to make sure about the reachability between the peers and the routing for the encryption domain.   In regard to your 2nd query, how are the both Palo Altos configured ? Are those in HA or Individual firewalls ? ... View more