About pandragon

As far as I remember, we can't run GlobalProtect and NetConnect concurrently on same PA unit. But a PC can have both clients installed concurrently and either of them can connect to different PA units running either GP or NetConnect. ... View more

You can create one rule (which needs to be identical on all devices) in Panorama for such situations. For example if you want a rule that says allow traffic from source named ServerABC which has different IP at firewallA, FirewallB, FirewallC. Create 3 different address objects in Panorama like ServerA with IP_Addr_A, ServerB with IP_Addr_B and so on. Then create an address group in Panorama like ServerABC that has members like ServerA, ServerB and so on. Presuming that network subnets under each firewalls are different and firewallA handles traffic from ServerA only (and so on for firewallB and FirewallC), such a workaround would serve the purpose. ... View more

Tried "Check Now" under Dynamic updates and it did not gave any error. system log also did not show any recent error for brightcloud. ... View more

One workaround would be use a separate web server to buy a wildcard certificate from Commercial CA with something like  *.yourdomain.com. Then export the certificate and private key file in PKCS or PEM format from that web server to PaloAlto firewall or Panorama. I think it may not be possible to generate CSR (Certificate Signing Request) from a PaloAlto firewall as I could not see any option to do that. Then the workaround like above helped. ... View more

You can try creating custom report under Monitor Tab - Manage Custom Reports. Then use Query Builder for query something like application not equal to dns. ... View more