Does Palo Alto Support IPv6 source NAtting for IPV4 addresses

Hi Everyone,

We had recently bought an ISP connectivity and we had got the IPv6 address.

When we configure natting for IPV6 host to ISP IPv6 IP address it is working but we need to provide internet access to IPv4 devices on our environment.

We need t

Inter-working of PBF and DHCP Relay

Hi All,

I have a query regarding DHCP Relay working with Policy based forwarding.

We have a setup where DHCP relay is configured on firewall and DHCP server is in remote location reached via IPsec tunnel. We have 2 IPsec tunnels configured (tunne

Web Application intermittently having a performance issue

From the tcp dump at the server end, I am seeing a lot of traces on TCP Dup ACK, retransmission and out of order being flag out at the pcap file

The connection made is via VPN client to the Web Application server. Tried few scenario where we acces

Policy Commit Failed

I am trying to push a template stack to FW, the same one is pushed to a lot other FWs but here i get this error 

. In virtual-router vr1, OSPFv2 is not supported on unnumbered interface ethernet1/1 in area 0.0.0.0.
. In virtual-router vr1, OSPFv2 is n

traffic graph for sub interface

am using two ports in LAG,

3 ISPs are connected to this port in VLAN

Total 3 sub interfaces

Anyway to get the internet usage graph of each sub interfaces

URL allow list for some of the subdomains

Hi all

I want to limit the user to access the company's sharepoint only, but not other sharepoint from other tenant or even the sharepoint from personal account. Then I found the below KB (section 6) and show how to use allow list in the URL filterin

Decryption GitHub not working

Hi

We are trying to run a api from passbolt to Github. In this we are doind decryption in PA.  If we add a SSL exception *.github.com is working fine or "no decrypt" policy is working fine.  any idea?

Here our health check:

passbolt]# su -s /bin/bash

Layer 2 interface vs Virtual Wire

Virtual wire mode, the interfaces assigned to virtual wire are transparent mode.

Layer 2 interfaces: interfaces can assigned to different zone.

DNS resolution stops working as long as GlobalProtect connected

hello guys,

Some of the users got the DNS issue for the external websites after globalprotect connected, the users are able to ping the external IP address but just the DNS does not work.

There was no change applied to the Firewall recently and only a

Strict IP Address Check after 9.1.12

Customer upgraded to 9.1.12 and after that it was noticed that for some of the zones, traffic was dropped. During debug,it was concluded that reason is Strict IP Address Check in the Zone Protection Profile:

"flow_dos_pf_strictip 1 0 drop flow dos Pac