About mbehlok

Well, Mark. I know that using the Mgmt Interface would make the things lot easier. But the reason I posted this thread is that I purposely don t want to use Mgmt Interface. ... View more

I have also used the timers within the PA.  I no have it set for 15 minutes of inactivity, but had it originally set to 12 hours and that seemed to work well. Running PA- 4.1.2 BTW ... View more

I appologize for not updating.  I was able to resolve the issue.  I ended up having to build a new tunnel interface on the Juniper side in order for OSPF to establish.  for soem reaosn it seems to have been an issue with the Point to Multipoint tunnels that were setup on the Juniper. Once i created the new tunnel, OSPF came up right away and has been working perfectly for a few weeks now. ... View more

Hi Kanish, I followed your examples for creating certificates for Global Protect..  But for some reason the portal or connecting via the Global Protect Client do not work..  The Portal just times out and client doesn't produce any errors or authentication window.. It only seems to work when l use the "web-server" local host device certificate within the Firewall..  But l don't want to use this as it is generating CN Host mismatch errors from the Global Protect Client.. We are using PAN OS " 5.0.3  and Global Protect Client 1.2.4 Thanks any help would be appreciated.. SG ... View more

I can't believe there isn't an easy way to specify this in this product since both Cisco and Juniper support pointing to a DHCP address. ... View more

I know this thread is more then 2 years old, but we are now on version 6.0.1 and still no feature for changing the MAC address ? I was looking for this feature as I also need to keep my external address because I have subscriptions like at spamhaus for certain feeds and they need to know my external ip-address. And I don't want to notify them all every time my ip-address changes. So when can we finally expect this feature ? In which build will it be included ? ... View more

Were you using the IPSec client or the AnyConnect client and what were the parameters you used? ... View more

Only questions testing the ability to read CLI command output, but not the commands themselves Also minimal or no Questions for Dynamic routing QoS and Policy-based forwarding ... View more