About thatguy

Hi all --   I curently have one PA200 with all four eth ports taken (internal/trust network, internet/untrust, dmz, voip vlan), as well as the mgmt port connected to the internal network.  I'm looking to get a disaster recovery plan in place, but, as far as I understand (from about here to here |--| ), I would need one of the eth interfaces to connect to a second PA200 to utilize HA-Lite.     Since I can't spare a port, would another option be to:  get a second PA200, import the current running config on the production PA, then just put the spare PA in the closet;  then if the production PA ever dies, just replace it with the spare PA and *poof* no one sees a difference?   Is that a sound plan?  I would think another benefit to this would be in case of a fire, etc, the spare PA could be stored in our other building.. but that could just be me trying to convince meself...   Thoughts? Thanks -- michael~ ... View more

Hi all --    Lately, with the Win10 release, I'm finding many of my VPN users are downloading gigs of updates over my meager 10mbps company internet cxn.  I'm wondering if there is any way to block specific services/applications (ie.- ms-update) over a GlobalProtect connection..  I can't find anywhere to specify a URL filtering profile in the Gateway config.. Would I apply a profile to the VPN IP Pool in the Security Policies?     Thanks -- michael~   edit:  Running on PA200, wth PanOS 6.1.5.  ... View more