About Alex_Gomez

Are you able to get it working with 3CX? I have the same PAN-3020 and am about to deploy 3CX on-prem. Did you have on-prem 3CX or Cloud hosted?   Care to share what you had configured on yours?   I was able to get the Firewall Check to pass after adding two ports, UDP 5060 and 3478 outbound. If I don't do that, the check will fail.   I saw those two ports are being denied so I added it the policy. The weird thing is 3CX manual does not mention those two ports for outbound traffic.  I'm not sure if this is PA or 3CX issue for using a totally different ports.   Appreciate the help!!     ... View more

Hello,   Nice solution and thank you very much for taking the time to think about this solution. Unfortunately, the firewalls are in a secure environment and do not have access to the Internet   Logs are sent to Splunk and Tufin servers which are on the same secure environment.   however, if it were necessary to create a server in this secure environment which allows to recover this type of alerts, it would be possible.   Thanks to all of you in advance   Valentino   ... View more

The setting that you are looking for is "User Switch Tunnel Rename Timeout" which can be found at: Network > GlobalProtect > Portal > [portal_conf] > Agent > App -> User Switch Tunnel Rename Timeout   See:  https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/globalprotect-portals/define-the-globalprotect-client-authentication-configurations/customize-the-globalprotect-app.html for additional details. ... View more

HI,   We are currently working design to use Azure as DR site. We stuck at the connectivity from our remote sites to Azure as all our remote sites are having ADSL connections with dynamic Public IP address which is not supported by Azure VPN Gateway.    We through for using Palo Alto firewall at Azure for on-premise connectivity but after looking at this discussion we have to rethink for that.   Can someone advise the best way to go? Alternate option is we can migrate our ADSL connections to Managed ADSL connection on which we will get single static public IP address, however additional operational cost involve in this option we are keeping this as a last option.   Thank you.  ... View more

Thanks for sharing the policy files.   Dennis ... View more