This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Hi @Shye80 You've got two options. Connect to the device using a console cable and remove the permitted IP configuration on the CLI. Connect up a client to the network and give it Panorama's IP address. Pretty risky this one though as you'd have to shut down Panorama or change it's IP which could impact your PAN deployment if you're logging and making changes etc on it. hope this helps, Ben
... View more
Hi @OMatlock, I wonder if you have asynchronus routing caused by the switch 1. Can you try running a packet capture on the interface circled to see if the return traffic is coming back to the wrong interface? As I understand it you want the traffic to be coming back to ethernet1/3 on the PA-200 #2. If this is the issue then I would think you can resolve it with a NAT rule. hope this helps, Ben
... View more
Hi @rjdahav163 My advice would be to take a look at the certificate hierarchy in Windows, are you seeing the full chain there that is expected when you open up the file? Example here, taken from the live community website: hope this helps, Ben
... View more
@MickBall Yes it is in the GP app config, in the GP portal @NIRAVK9 I'm not sure on this one as I have never done it myself as I've never needed portal redundancy due the above cookie authentication. A solution may be to allow users to change the portal address and use different portals but the same gateways. GP should connect to the gateway that responds first.
... View more
Hi @NIRAVK9, You would need a script to automatically modify the DNS record if the 1st site was to go down. You can poll the firewall to see if it is up/interface up using SNMP. Though you can set the portal cookie to stay for a week on clients so they only need to connect to the portal once every 5-7 days, this is usually enough time to get the portal up and running again if it goes down (RMA/case with ISP etc.). Alternatively you could look at GP in the cloud? https://www.paloaltonetworks.com/products/innovations/globalprotect-cloud-service hope this helps, Ben
... View more
