About shafi021

Hi Guys,   I have Firewall setup where standby firewall has more config then active firewall. Right now config is out of sync and HA1 back up link is up. HA1 and HA2 links are down. What I want is the config of standby firewall on the active as well . if I click on 'Sync with Peer' , which config will be synced ?   @BPry can you please help on this?   Thanks   ... View more

Hi Guys,   I want to create the DOS profile for critical servers. I read that I can use classified type so connection count toward only one IP address. My question is can I add multiple servers IPs in same DOS Rule or I need to create multiple DOS rules. Also, I might need to tune threshold base on servers so is it better to create new DOS rule? If I use same DOS rule then connection count will still be per destination IP or will it act like aggregate to all the Destination IPs ? ... View more

Hi,   I am looking to block the RFC 1918 blocks coming from internet to our LAN zone. So, Policy will be Source zone: Public , IP: RFC1918 blocks, Destination zone: LAN, IP : any . Can you guys please confirm that creating this policy will fulfill my requirement?    @OwenFuller can you please give your input?  Thank you    ... View more

My Global protect VPN certificate is expiring soon. How to renew the certificate. System engineer provider me certificate in .p12 format. This is my first time to do cert renewal. Please guide me. Thank you. ... View more

Hi Guys,   I am new to Palo Alto. I recently joined the firm and they are using any any as policy for internal to Public, Internal to WAN zone. My tasks is to identify the ports which are being used and apply the ACL.   My question to experts is how to find out which ports are being used and how should I apply this ACL on PAN.   I have little idea that I can check ports under traffic tab and need to create service object to apply on zones.    Guys please suggest me the best approach and guide me  on how I should achieve this goal.     Thanks  ... View more