About janelle.provine

tac told me it was fixed by 10.2.3 ... View more

Nope my os is 10.2.2 ... View more

@Michael.Martin  I opened a ticket a few days ago with support and asked for a root engineer so they would login and clean up the root but I have yet for them to respond to me, so I can to the community to see if there were any ideas since support has been useless to me ... View more

@skmurawski  Did you ever find a solution for this or did you just buy something bigger? ... View more

@BPry  So if you add another switch, you would have to configure another eth1/? port for HA1 and HA2, and two more (trunk) ports on the second switch for HA1 and HA2?  So something like this    ... View more

@BPry  The two boxes are already fully licensed, they are only plugged into one switch and want to know what happens if that one switch fails and how we can get rid of the one point of failure ... View more

I figured out that the issue is caused by the fact that we are using duo mfa and the user in duo mfa is different from what is in the AD user group applied to the rule so that is why any user works and I was looking for the wrong user in the log so that is why I did not see it. I added a alias in duo that matches the AD usersname but it still didn't work, Any idea  ... View more

I have split tunneling turned off so all of the users traffic routes through the internal network including his internet access.  ... View more

@BPry  Yes logging is turned on for all the security rules, and it is logging for those on the internal network but not for those on the VPN ... View more

@BPry what would keep the rule from logging the facebook traffic while on the VPN? How can I check? and yes I can see other people using it just not when they are on the VPN ... View more

@BPry  Have you verified counters? Which counters are you referring too the ISP tested and said there was 1 gig coming to the modem.  If you've been testing without security profiles applied  no I have profiles, speed/duplex have been verified -you mean of the pc,s and switch the pc's are on?, a nd you have QoS disabled - yes and the speed went from 50 to 150     The only other thing that I've seen cause similar issues (to a far lesser extent) is when the firewall is behind another device performing a double NAT.- not sure how to check that all I have it natted to the external IP and the net hop in the vr is the modem   You've verified that you don't have any traffic between location B and your primary location being denied? - yes the configuration is exactly the same as on the pa 220 that I migrated from , I imported it directly to the 440. This is not a voip they do not have IP phones it is going from the PBX ip on our side to a IP address of the PBX on the remote site across a ipsec tunnel.    How were you able to access it before, directly to the IP/FQDN or by using GlobalProtect?  -direct by the external IP address no gpvpn. The internet speed was upgraded quite awhile ago but they were limited by the PA 220 that is why we are upgrading them to PA440 Is it possible that you replaced some ISP gear that wasn't put into passthrough mode and is performing its own NAT; this would explain the broken camera system access if you were accessing it directly by IP/FQDN. - the ISP came and checked it out and the only thing they said was the that traffic was being shapped I am sure they meant we were doing it ... View more