About GlennSJ

Thanks Glenn for your input, I will give it a try and get back to you.   Cheers,   ... View more

In palo Alto you need to create first NAT Rule with same destination and source  zone and for destination translated port  for you need to specify the port which server need to listen on.   for example user open url  https://4.4.4.4  then if server is listening on port say 456 then under destination port translation you can put port 456 and also server private ip address.   Then security policy with your external zone as source and destination zone where server lives. Destination IP will be the public IP.     ... View more

Calling a couple weeks ago about this, support said 7.0.2 is recommended over 7.1.x at that time.  YMMV ... View more

I'd open a ticket, to at least get that process started.     We found with non-persistent VDI they are only licensed when a user is logged into the vm.  Once they log out it releases the license until another user logs into that machine (this is with floating user assignment not dedicated).  If you are using Palo Alto NGFW at the perimeter, something we found that wasn't in the documentation is that it needs "google-base" in addition to "cortex-xdr" in the outbound security policy.  If you think it is a communication issue check your traffic logs on the firewall to see if you are seeing any "deny" actions from that machine.   edit:  FYI - cortex-xdr depends on ssl, web-browsing   ... View more

Yes Cortex XDR is supported.  Use the VDI_ENABLED=1 switch when installing in the base image.  There is also an imageprep process to go through when creating the image, and when adding files to the image later.  All this is documented in the Admin guide.  I don't know about the licensing question. ... View more