About DRobinson_TIC

Hi All,   We have a number of tunnel interfaces managed by Panorama where we want to change the default MTU size.  Just wondering if we can script this or does each interface need to be touched to make the change?   Thank a Veteran today, Dan ... View more

Hi All,   I may be missing something but wanted to check with you all.  I have a network with a PA-200 (vwire) between a FIOS router and a Netgear Layer 2  switch.  I also have WAPs connected to the switch.  The FIOS router is providing DHCP address to the wired/wireless clients connected.  The DHCP clients are not getting IP addresses and I'm getting errors that the DHCP server cannot be reached.  I do have an outbound rule so I can test URL filtering, but everything is set to alert in the URL Filter Profile.  BTW, no DHCP issues are encountered with the PA removed from the mix.   It's a pretty simple setup so I was wondering if anyone has had this type of issue.  Or maybe my setup isn't correct?  I'd appreciate the help.   Thanks, Dan ... View more

Hi All,   I'm playing around with my PA-200 and wanted to see if there's a way to configure USER-ID & URL Filtering without any directory services (AD, LDAP, eDirectory, etc.)  I'm still pretty new to the Palo Alto game so was looking for a little insight to see if this is even possible.   Thanks, Dan ... View more

Hi, I have Frontier FIOS and am currently using an ASA for my Internet router but want to use a PA-200 with a Cisco 891F behind it.  The design looks like this:   ISP(DHCP)----(e1/1)-PA-200-(e1/2)---891F (5 subnets)   I set e1/1 untrust w/DHCP from the ISP and e1/2 trust w/static /30 to 891F.  I also checked auto create default route to inject route from the ISP and setup Outbound NAT to any/any with no other security policies in place.  I allowed ping on both interfaces for troubleshooting.   I prefer not to use the PA-200 for DHCP, therefore, on the 891, I have multiple VLANs with DHCP processes doling out IP addresses/SM/GW/DNS.  That works fine and all routing seems to be working, as well.  Added a default route to exit the 891s interface connected to the PA-200.   The PA-200 did acquire a DHCP address from the ISP.  The trouble I'm having is that I cannot access the Internet from any deivce nor ping the untrusted interface ip.  I am not using the ISPs router at all.  I guess I am not sure if this is the best design to get this going so, if not, can someone point me in the right direction?  I hope this makes sense.   Thanks, Dan ... View more