About emr_1

As far as I know, there is no official document for EoS of PAN-DB (URL4). On back days, salesforce (ordering system of PAN) suddenly stopped ordering URL4, and there is no announcement of EoS at that point. Afterward, we recieved "localized official document" of EoS announcement which is for distributors. According to that document, it describes... "Effective November 1, 2021, all URL4 SKUs will be discontinued and consolidated into Advanced URL Filtering (hereinafter ADVURL)." What I meant to you is that they are not using any phrase of "End of Sales" in this document. They are saying "Discontinued and consolidated". *Note: I can find "EoS" phrase on other subscriptions on other localized official documents. Even I'm not sure, this might be a reason for not listing URL4 on EoS page. Hope this helps you. ... View more

Expedition Tool is over.   https://live.paloaltonetworks.com/t5/expedition-articles/important-update-end-of-life-announcement-for-palo-alto-networks/ta-p/589642   ... View more

I believe Cloud NGFW is available only with PAYG. Please refer to 6th page of the datasheet. https://www.paloaltonetworks.com/resources/datasheets/cloud-ngfw-for-azure   Simple Procurement and Setup With Cloud NGFW for Azure, you can implement next-generation network security in minutes. Procure Cloud NGFW via Azure Marketplace, set it up with a few clicks, and integrate with native Azure services, such as Azure Key Vault and Azure Virtual WAN. You can set up rulestacks and automated security profiles in only a few minutes. Cloud NGFW for Azure is available as a pay-as-you-go service. You pay an hourly rate for each availability zone where your NGFW is deployed. You also pay for the amount of traffic, billed by the gigabyte, processed by the NGFW. ... View more

I would say 11.1.   From Software EoL perspective, 10.2 will be Limited Support in next month, thus PAN does not release updates for P2 or lower (non-critical) issues https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-policy#lsupport   From Hardware EoL, you have no chance to grab 11.2 for PA-3250. It says last supported version is 11.1. https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates   ... View more

Even I'm not living in Europe, I think there is no restriction (minimum amount of credits) for purchasing credits. At least I could buy 15 credits in APAC. If "with minimum of 500 Credits" is true, I believe this is rule in reseller, not palo alto networks. Thus, I suggest to contact other reseller. FYI: By the way, I could add 45 credits here. (just proof you there is no minimum) https://www.markit.eu/au/en-au/pan-software-ngfw-lab/v2p32331715     ... View more

Yes, you need subscriptions/licenses to detect (and also to block) ... View more

Thanks for reply. I understood that. ... View more

It depends on your configuration of... -split tunneling -security rule (especially for DNS, HTTP, HTTPS in this case) -nat rule (from GP tunnel to internet)   Please look at your config and logs, and find out how is your traffic is handling by PA device. ... View more

If you are currently using "External Gateway (auto discovery)" mode which described in following url: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-gateways you can use manual mode instead.   After configuration, on user side, he/she can select which gateway to connect. ... View more

https://status.paloaltonetworks.com/incidents/d3bs717c7yq8   Even this information is for prisma access, you might find the hints. If you are using decryption rules, bypass rule might help you. ... View more