About nwnetadmin

Hello, I am trying to use the Palo Alto Bulletproof, high Risk, and known malicious dynamic external lists. However, I can't add them because the sources aren't listed in the drop down menu of the "Add External Dynamic List" window.     I read that it uses the content updates to get those. I am up to date on the Application and Threats Dynamic Updates. And the Threat Prevention License is active.    Firewall is a PA-820 running 10.0.5.   I seem to remember that, on my other firewalls, these lists were just "there" to be used in the security policies. Seems like there is probably just another check box somewhere for me to trigger those to be available, but I am not sure where.   What could I be missing?   Thanks ... View more

Hello, I am looking at setting up a remote access VPN on a PA220. The idea, however, is that the user would have concurrent access to a server at the PA220's site as well as servers at another site, that the PA220 has a IPSEC VPN with.   Here is a diagram:     In case this isn't clear.... the WAN interface of the PA220 would service both the remote access vpn and the ipsec site-to-site vpn.   I am assuming that the vpn client's ip address would have to be in the scope of the VPN configuration. And some NAT exceptions in place.   Questions... 1). Is this possible? 2). What is this called? (hopefully I can use that to find a configuration guide). 3). Does this require a specific license?   Any other tips / issues / caveats to be aware of?   Thanks! ... View more