I want to disable an IPSec VPN. I have currently blocked traffic both directions to the tunnel by using a Security Policies, but there should be a way to disable the tunnel in the IPSec configuration (or alternatively, disable the tunnel interface). I don't want to delete it, but I don't want it taking up processor speed for a tunnel that I don't want turned on. ... View more

I'm trying to figure out how to allow users to VPN into the Palo Alto, and I was wondering what my options are? I attempted GlobalProtect, but it really was not clear on how to allow users to download the client for the first time. I'm not sure that I want to pay for it if all I'm doing is allowing users to VPN anyways. I've set up an IPSec VPN to a dynamic address, and i put in the PSK in the Windows dialog, but it requires a peer identification, which is nowhere to be found in the windows VPN setup dialog. It also asks for a username, password, and domain, and the Palo Alto does not allow me to associate the login information anywhere. ... View more