About SammiSolmonson

The error message on this users GP client says they have an issue with they're certificate. The helpdesk apparently installed a certificate but I am not sure which one or where exactly. Now its telling me it cant access the portal at all. I want to doublecheck the user has the correct certificate. I know where the certs are in the palo alto and there are two offered through the GP portal. Although I don't know where the GP client looks for these certs on the client side or if the certs look exactly the same on the client side. Does anyone know? ... View more

I am deploying a Panorama VM into Azure. I setup the VM according to the documentation at https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/install-the-panorama-virtual-appliance/install-panorama-in-azure but have not been able to gain access to the machine as of yet. I made it to step 7 where it says to log into the machine. It says to log in through public, although I would prefer private I have attempted both public and private and seem to not be able to get access to either. I tried setting it up within its own VM as well as in a VNET we already route to. I also tried setting it up with and without NSGs, and checked all routes within azure but I do not see anything stopping it. I tried setting up explicit routes rather than just relying on the peerings as well but that did not help at all either unfortunately.    To test I setup another VM in the same VNet and can access that machine no issue. However I cannot use that machine to access the new Panorama VM. All of the packets I can see leaving my datacenter say incomplete and show no returning packets. I am at a loss at this point and was wondering if the community has had similar issues with setting this up at all? ... View more

While setting up global protect from my azure palo alto appliance I noticed when I try to 'check for updates' I get this error " Failed to check upgrade info due to Unknown error. Please check network connectivity and try again." However I am able to connect to updates.paloaltonetworks.com. DNS is setup and running properly. I am even able to get dynamic updates as well since originally both were giving me issues but I found the issue for dynamic updates was IP forwarding was disabled. I can even traceroute to the update server, the only weird part is that it takes 12 tries to get a response. Does the palo alto give up before that many tries or is there something else I should be checking here?  ... View more