About aaputis

Hello, I have one question and I hope somebody will help me. Does PaloAlto has a recommendation for failover link latency. For example I have firewall cluster and this cluster is done across wide area.  What max latency should be used for properly functionality between cluster members.  For example cisco says that failover link latency should be less than 10ms and no more than 250ms. Thanks, ... View more

Hello, I have one vpn configuration question, I hope somebody can help... I am configuring vpn site-to-site in my site PaloAlto, other site is not important in this case. I am making source and destination NAT for the traffic that is used for vpn. The purpose of this NAT is that we have lot of vpn tunnels and we have similar IP networks on local and remote site. I want to make correct vpn configuration. 1. When I am configuring IPsec Tunnels and have to identify local and remote  ProxyID, what IP network I should add? pre nat or post nat  network ? 2. I have to configure a static rule for vpn traffic. What destination network should be in that way? is it pre nat or post nat network ? if I am adding pre nat network I faced problems that there are other static routes which is used in my local network (because some remote sites subnets are similar like my site subnets). I hope I write everything clearly and somebody can help me Thanks, Arturas ... View more

Hello, I have such situation that I need to make routing through virtual system. I added a network diagram below. Maybe you guys can help me in this situation. I want that traffic from Vsys2 can access GW_default as it can Vsys1. Also I want to control traffic between zone_1 and zones_2, zones_3 .What solutions there can be ? I now that there is shared gateway configuration, but I am not sure if it will fit in my situation... Thanks, Arturas ... View more