About RudolfTorvenyi

hello, is there a confirmed release date of PANOS 6.0.2? A month ago I had a case open, where the support guy has told me that the expected release date is arount the 21th of April. Today is the 24th and still nothing thanks Rudolf ... View more

hello, I have an existing customer with an Cisco router. On this router is terminated a GRE over IPsec tunnel. Now they have bought an PA500 appliance. Is it possible to have the GRE over IPsec tunnel on PA, or the only way will be to reconfigure the tunnel to IPsec? thanks alot Rudolf ... View more

Hello, I don't really get the application dependency. I had a case at my customer. They asked me to allow gmail-base application, so I made security policy. But when I committed the settings a popup appeared that told me that additional applications should be allowed. Like smtp, imap, pop3, ssl. But I don't want to allow them. How can I do this? thanks ... View more

Hello, My customer has two sites connected with IPsec tunnel. Now all users in all sites browse to the internet through proxy server. Site A Cisco ASA 5505 192.168.1.0/24 CryptoMap     access-list S2S extended permit ip 192.168.1.0 255.255.255.0 192.168.0.0 255.255.255.0 access-list S2S extended permit ip 192.168.1.0 255.255.255.0 192.168.8.0 255.255.255.0 Site B PA200 192.168.0.0/24 192.168.8.0/24 this IPsec tunnel is terminated on a tunnel.1 interface, which is in zone named S2S ProxyID local 192.168.0.0/24     remote 192.168.1.0/24 local 192.168.8.0/24     remote 192.168.1.0/24 My question is. I want to route all traffic from site A (behind Cisco ASA) through the IPsec tunnel to site B and then to internet, because I want that all traffic is scanned by PaloAlto. And I want to get rid of the Proxy Will it be possible if I just change the: Cryptomap to: access-list S2S extended permit ip 192.168.1.0 255.255.255.0 any PaloAlto ProxyID local 0.0.0.0/0     remote 192.168.1.0/24 NAT policy S2S to Outside Security Policy thanks for advices Rudolf ... View more