About OtakarKlier

Hello, While I have not done this, have you tried using the Expedition tool? https://live.paloaltonetworks.com/t5/expedition/ct-p/migration_tool   Just a thought. ... View more

Hello, Just curious as to why? What is the issue with redirection to https?   One thing to remember is that the Palo Alto is a security appliance and tries to do its best to stay that way, hence the https traffic.   Regards, ... View more

Hello, When you mention 'string' are you referring to the password or the view?   Regards, ... View more

Hello All, Here are a few thoughts: There is a reason you are blocking those countries in the first place ( this is what I would tell management, I have done so in the past) You can have the users call in and whitelist those IP's however they might/will change frequently Utilizing multifactor authentication, open up those countries to allow connectivity Take a look at the Prisma offering from Palo Alto, Similar to VPN except in this case adversaries would be attacking their infrastructure (VPN end point/Proxy) rather than yours. Its not a simple answer I'm afraid. However come up with a few options that are manageable and sustainable and present it to management with their drawbacks. Let management take the risk, its their call anyway.   Just my thoughts. ... View more

Hello, I just reread the initial issue, any reason you have 10 tunnels between the two devices? 1 is sufficient, its all encrypted. Regards, ... View more

Hello, Have you tried a different browser, such as IE? Regards, ... View more

Hello @hh_cloudio , What is the use case you are attempting to resolve? Just connecting or something else, more curious than anything?   Regards, ... View more

Hello, My guess would be asymmetric routing. Any reason you are using 2 VR's? Just asking since I usually like to keep things simple. Regards, ... View more

Hello, That article is not for Global Protect but for site to site tunnels. I accomplish the same thing without using two VR's but I use OSPF and weighted metrics instead. I think for Global Protect, you would need to utilize something like multiple Gaterways: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClU8CAK   Regards, ... View more

Hello, Honestly the little extra for the pa-440 is worth it even for a smb. Just my thoughts. Regards, ... View more

Hello, You can have two agents installed at the same time. Just cant use them at the same time, then its one or the other. Regards, ... View more

Hello, What is the timeout setting for your user-id settings? Also what are you using for user-id to perform the mapping, active directory logs, etc.? Regards, ... View more

Hello, Also check to make sure you have security policies to allow ping. If you are attempting to ping interfaces on the PAN's, you'll need to enable that as well in the interface management. Regards, ... View more