FTP Data - Handshake is not estabilished

Hello,

we are struggling with this problem.

There is a FTP Client and an FTP Server. Both on different sites. Between them is a VPN Tunnel build with PA 3020 and PA 5020.

FTP is working - but sometimes not!!!!!

We found the reason for this:

This is what

Set Up Data Port for external services

Hallo all,

I am following the document PAN OS 6.0 Admin Guide. Since my management port does not have internet access, I have to setup a data port for external access and updates. So the mentioned document, in the section called "Set Up Network Access

OT: SNMP Trap to SMS

Hello

I have question not directly connected to PA but I think here are peoples who using such solution or are interested in

I spend over a hour on googling for simple and free solution for recieving SNMP trap and sending alert by usb modem  as a SMS

Configure Certificate Based Authentication for IKE: ISSUE Cert

Hi all,

I config IPSec betwen two PA device: 1 PA5020 and 1 PA

I config as guide: How to Configure Certificate Based Authentication for IKE on PAN-OS 6.0

I generate CA on PA 5020 and import to PA 200

But on PA 200 i can't sign new  Cert with the imported

can we get the lost pre-shared key ?

Hi ,

i have a palo alto firewall, i have been asked to put together the pre-shared keys for our VPN peers.i am not able to locate the key for some tunnels, is there any way i can recover the key from my config ?

Regards,

~Harry

Suspicious DNS Query

Hi All -

Looking through my threat monitor and I am seeing a lot of Suspicious DNS Query entries in there.  I have two internal DNS servers, and the entries are for both of them -- the drop-all-packets action is being taken, so it's good the PA is sto

Basic GlobalProtect Walkthrough

Hello,

New customer here, currently working my way though configuring the various parts of the firewall...

At the moment, I'm working on User VPN, and I'm finding it difficult to find clear step-by-step documentation. I did manage to make an SSL vpn co

Skype manager custom application

Hello,

I'm actually blocking skype application but I would like to allow skype manager web site (https://manager.skype.com/).

The web site manager.skype.com is blocked because recognized as skype application.

The idea is to build a application that allo

Dropbox uploading

For dropbox on the web.  I need to block uploading, this works with chrome, ie.  but with firefox if i create a File-Blocking policy with the following. Firefox will not stop the dropbox upload.  IE and Chrome will.

Any application upload block

applic

Terminal Server Agent

Is there anyway to import a list of Terminal Server Agents installed to the firewall?

I have about 250 Terminal servers.