About andrewl_coh

Dear Andrew,   Thanks for topic. But Our Mac's in domain and we don't want to use GP for machines which in domain, but User-ID agent don't recognize the user. ... View more

Hey Peter,   I recommending reviewing the documentation for GlobalProtect. This is Palo Alto's VPN solution for client connections. You will need to setup a GlobalProtect gateway and portal on the firewall which will allow clients to authenticate using the GlobalProtect client on their computers. From there you can create specific security policies to allow access to the servers you are hoping for. I have attached a few links for reference.   https://www.paloaltonetworks.com/products/globalprotect   https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-gateways/configure-a-globalprotect-gateway.html      ... View more

When you imported the PANOS configuration, was this already in PANOS 9.x?   PANOS 9.x has a few extra things to take into account in the XML generation, and we try to identify our target based on the base configuration that you have imported into the project. It would be good if you could share with us via a secure channel your Expedition project, so we also identify if we are missing something while generating the XML config files for PANOS 9.x ... View more

You will have to import a routes.txt file. To create one run a "netstat -rn" or "show route all" on your Checkpoint CLI. Copy the table into a .txt file called routes. ... View more