About CraigAddison

Hi,   I have had to replace a PA-VM as the old one died. I have licensed it & imported it into Panorama, but when I try the initial push of the cfg it errors and fails- Details: . Validation Error: . network -> interface -> tunnel -> units -> tunnel.100 -> ip -> None None is an invalid ipv4/v6 address . network -> interface -> tunnel -> units -> tunnel.100 -> ip -> None 'None' is invalid. Invalid IPv4 address . network -> interface -> tunnel -> units -> tunnel.100 -> ip is invalid . invalid interface address None(Module: routed) . client routed phase 1 failure . Failed to set None to Primary DNS in tunnel GW-N . (Module: rasmgr) . global-protect-gateway tunnel (GW-N) parsing failed . (Module: rasmgr) . client rasmgr phase 1 failure . Commit failed   There are variables set as there are 2 firewalls in the template & the tunnel.100 IP & Primary DNS in tunnel GW are different IPs on both firewalls. It says that these need to be configured on the device- I can configure the tunnel.100 on the device, but when I have to configure the Primary DNS in tunnel GW, it is insisting that I set up GP including adding a cert/SSL Profile etc...   Is there any way I can push this cfg without have to pre add all this config?  ... View more

Hi,   The Clientless Portal is now displaying a blank page after a software upgrade (from 9.0.9xfr to 9.1.15). The developers say that the javascript minification process is no longer working and no longer pushing data into the Pan_js module for it then to be passed back to the portal. Has the update caused this? What is the fix? TIA     ... View more

Hi,   I am currently on GP 5.2.10 & I logon to Windows 11 via a PIN.   When I upgrade to 6.1.0 my windows 11 laptop defaults to password & I have to change it to PIN and then logon. When I revert back to 5.2.10 it defaults to PIN logon.   Is there a way to set PIN as a default when I upgrade to GP 6.1.0   Thanks. ... View more

Hi,   I would like to set up Global Protect VPN on 2 sites, and have a round robin redundancy between them. i.e. user1 logs on the GP VPN and connects to site A, then user2 connects to GP VPN and connects to site B, and so on...   Is this possible?   regards, ... View more

Hi,   There seems to be an issue with our internal Palo firewalls and their Data redistribution, I'm not sure how long it's been an issue.   What it should do is redistribute the user authentication events to every firewall so it can use that us the user id in the firewall policy, but this isn't happening. User ID isn't showing across firewalls, like it isn't traversing the network.   Can anyone give me an idea what I need to look at, and why it could be an issue? ... View more

Hi all,   I have just installed 6.0.0 to test. Has anyone else had chance to test 6.0.0?   I previously had 5.2.11 installed without any issues, and the GW is on 10.1.2   The issues that I am seeing with 6.0.0 are- Slower authentication with SSO via SAML-an extra 5-10 seconds over 5.2.11 Win10 PIN code logon defaulting back to password on every startup/logon (my preferred login is with PIN) I have rolled back to 5.2.11, and the issues have disappeared.   Anyone else seeing the same issues?   ... View more