About DonohoeRobert

Hi Mate,   No worries at all..    Ye need to create a tunnel interface here 100%. Gateway and portal on loopback interface is grand, but would enable tunnel mode as per normal as well.    Let us know how it goes, article a little old but can mock up in the lab again if needed.   best regards   Rob  ... View more

HI Mate,    They are IP address's not URL's/FQDN's If creating rules and ever not sure what category a urll or address is from the cli do a test cmd. Below is a test cmd for google.com   >test url google.com .    https://live.paloaltonetworks.com/t5/Management-Articles/Complete-List-of-PAN-DB-URL-Filtering-Categories/ta-p/129799   best regards,   Rob   ... View more

Hi Mate,    Would aggree with all of the above. Can differ from network to network, what locations to block.Running a custom report off a deny rule, currently blocking threats or inbound traffic could help you make your mind up in respect of the risk of traffic to or from certain countries aswell.     Best regards,   Rob ... View more

Hi Guys,    Interesting one, tested again on 8.0.7 , no joy for android 6. IOS devices connect fine with the xauth. Client works best always anyways if the licence.  Have ye tried cert authentication for the androids on 6.0. Will check tomorrow, but with the cert based auth/client certs can have sha 256 if androids need that.  Might be a workaround to get ye out of the woods.  The gp client connects fine anyways, no licence needed for the gp client on version 8 on windows or macbooks. and IOS devices connecting fine using xauth from a quick check.. best regards,   Rob  ... View more