Hello,   I'm afraid the answer is going to be no, but is anyone aware of an option to rematch the QoS class applied to a session, based on a schedule applied on a QoS policy? I'm trying to restrict bandwidth for a flow within certain hours, but that only works for new sessions and does not modify existing sessions. ... View more

Hi,   I'm stumbeling upon an issue while importing a CP R80.30 configuration, exported with the github script. When I import the config in expedition (1.1.70), it only seems to import the parent rules for the in-line layers and not its members: as you can see, there is a management section (5 rules) with no in-line layer. These rules get converted fine. For the other sections (outside, external dmz, internal dmz) the expedition tool only converts the "parent rule for ..." and nothing below them.   I extracted the obtained .tar.gz files and validated the info for these rules is there in separate HTML&JSON files. Am I missing something in the import process or is this a bug/feature request?   Kind regards ... View more

Hi,   In a somewhat unusual case I'm trying to use objects pushed through Panorama, in a policy in expedition. Both Panorama and the firewall are linked & imported in the expedition project. Moving the firewall policy to an all Panorama policy isn't an option here (yet). Is there a way I can use a Panorama object (already present on the firewall) and use it in local policies through expedition (or the find/replace functionality)?   ... View more

Hi all,   I've deployed a GlobalProtect installation solely for the purpose of User-ID. The GP agent connects to the internal portal/GW (one box) upon login with Kerberos SSO. However, when the internal gateway is not reachable (user has no network, user isn't on-prem), the GlobalProtect Agent notifies the user about this (no network / can't reach GW). Does anyone know how I can supress this warning?   ... View more

Hello,   Has anyone managed to get a R80.10 import completed based on the show package output? I've got the import of the address objects/services/.. but only the global access policy layer seems to get imported. They are present if I look at the contents of the json/html files inside of the package though. If I try to import the .json rulebase using the R80 import tab it reads a syntax error, malformed JSON. Any known tricks to get the others imported as well? ... View more