Case Number - 02351211

I whitelisted a site and they are able to access it but not when they connect to VPN. Looking for assistance with this. 

AWS, gw loadbalancer and geneve

hi,

I have set up two palos in different az's in AWS. I have utilized the gw lodbalancers and done the bootstrapping so to get them "healty" etc.  The soultion is working fine!!

But I am having a very hard time understanding how to get the panorama

Videos for AWS GWLB and Azure GWLB integration with Palo Alto

As I see many people doing  AWS GWLB or Azure GWLB integration with Palo Alto there are good Live Community videos for that in Youtube:

https://www.youtube.com/watch?v=c28ZwlhCIWE

https://www.youtube.com/watch?v=RFfQbSDSxlE

AWS IPSec tunnel active/active HA with BGP

Looking for some help here.  I have an ongoing case with support concerning AWS tunnel issues.  My production FWs are active/active but not in sync.  Just always been that way, it's the way I inherited it.  I have 4 tunnels to AWS (2 on each FW) BGP

Packets loss but no drops - VM Series, AWS, GWLB

i have a server sending traffic on 443 through GWLB to my Palos and out to the internet

The logs all say 'aged out'

Packet capture reveals the SYN arriving wearing GENEVE, being de-encapsulated, source NATed and forwarded out Untrust

The SYN/AC

Palo Alto and Azure Application Gateway

Hello

I'm deploying infrastructure on Azure with Palo Alto firewall. We will host web application (appli1.company.com & appli2.company.com) on a vnet dmz. My design is based on Hub/Spoke configuration and I configured an vNet Peering between my DMZ

Unable to change subnet for Cloud NGFW

I cannot change the subnet for two Cloud NGFW endpoints on the Portal. The admin portal says I am not authorized even though I am a tenant admin.

I am trying to change the subnet because the subnets the firewalls are configured to no longer exists a

VM-500: HA1 Down, HA1 Backup Up, HA2 Up.

NOTE: 

This appears to have been an issue in the Cloud space. I suspect a VMotion or reboot of the VM Host resolved the problem as an unrelated issue with spinning up access to the VM was resolved at the same time this HA issue was resolved and no co

Configuration VM-Series on Azure cloud

Hello

I'm deploying my first Palo Alto on Azure (I already deployed physical appliance) but I'm blocked. 

I would like to deploy this type of design. The global network defined is 10.200.0.0/16 who are splitted in serverals sub-networks. I have o

age out error

Hello

I'm deploying a Palo Alto on Azure. I want to use 2 interfaces : one interface (eth1/1 configured with public-vr router) dedicated for Internet outbound (including for users connected with Globalt Protect) and one interface (eth1/2 configured

Packets being denied intermittently.

My company has had an issue for over a year and Palo Alto cant figure it out.  We're using Azure's Palo Alto offering.

* We have a security rule that is sourced from our trusted paas  and destined  to Azures Paas storage.  Port 1433 app id: mssql db

AWS and Inbound SSL Inspection

Hello all,

After some help as not getting much from support.

We have a customer with an Amazon AWS solution. We have a web server in the trust zone and we have been asked to set up inbound ssl inspection.

There is a load balancer after the firewall

GCP Deployment

Hi,

I'm trying to deploy two tier architecture in my lab.

Below is the VPC & Subnet  details:-

PA-VM has been deployed successfully & also