About gcampbe9

Hello,   We have a PA5050 with a couple of VRs.   VR1 is the main VR with interfaces into the main customer networks, internet access and a 3rd party link VR2 is for GlobalProtect clients and a separate internet link for the GlobalProtect Portals/Gateways   There is an eBGP Peer between the VRs so that VR2 can learn all the corporate networks and the GlobalProtect VPN client pools are redistributed from VR2 into VR1   We are experiencing an issue since moving a couple of Global Protect clients from VR1 to VR2 (10.100.140.0/23 and 10.100.142.0/23) with access over to the 3rd party now failing   There is an OSPF peer between VR1 and the 3rd party and we are advertising out the GP client pools 10.100.140.0/23 and 10.100.142.0/23    However, we are seeing the OSPF peer advertise our client pools 10.100.140.0/23 and 10.100.142.0/23 back to us.  Any ideas as to why this might be happening and is there a method to filter out these updates from the specific OSPF Peer as I am reading this is not yet a feature on the PAN-OS.    Thanks & Regards ... View more

Hello, I am looking for clarity on the method for requesting and installing certificates for GlobalProtect on appliances that are managed by Panorama.  Should I be generating the CSR on the Panorama or the local appliance?  Once I get the signed certificate chain should that be imported in Panorama or locally? How does it work for devices managed by Panorama? I am struggling to find any clear documentation around how certification works with appliances managed by Panorama.   Thanks in advance. ... View more

Hello,   I have to reconfigure management IPs on PAN-OS 8.1.x firewalls, which is managed also by a Panorama 8.1.x server. My thinking re process is as follows:   Add new policy to allow Panorama to new Mgt IP on applicable firewalls and vice versa. Reconfigure management IPs on firewalls (locally) Reconfigure Panorama device groups etc with new management IPs of firewalls.   Are there any gotchas or steps I should ensure as the firewalls are out in Australia and the Panorama server is in the UK so want to make this as smooth as possible?   Many thanks in advance.     ... View more