About ekerstetter

cwilliams, is this an example you are thinking of? Say that the Firewall detects a port scan from a particular IP address. What some IPS devices do is block that all traffic from that IP address for a certain amount of time, say 10 minutes. Once that timer expires, traffic is then permitted from that IP, until anoher violation occurs. ... View more

Hi Kanish, I followed your examples for creating certificates for Global Protect..  But for some reason the portal or connecting via the Global Protect Client do not work..  The Portal just times out and client doesn't produce any errors or authentication window.. It only seems to work when l use the "web-server" local host device certificate within the Firewall..  But l don't want to use this as it is generating CN Host mismatch errors from the Global Protect Client.. We are using PAN OS " 5.0.3  and Global Protect Client 1.2.4 Thanks any help would be appreciated.. SG ... View more

Hi, unfortunately multiple gateways using the same IP address is not a supported configuration.  I recommend using user groups within your security policies along with a user-identification configuration to achieve similar results. ... View more