*URGENT* Captive Portal Authentication.

Hi team,

Query about Captive portal Authentication.

One of our customer enabled the CP auth but they needs to allow particular URL's without CP auth redirect even for unknown users.

How to achieve this ? also please share the KB articles which is rel

Palo Alto policy based forwarding (PBF) with enforced Symmetric routing enabled config

Hi all, am having problems with Palo Alto policy based forwarding (PBF) with enforced Symmetric routing enabled config. 

Intrazone-default rule

Hello,

I would like some advice on Palo Alto's default intrazone-default rule.  Unless I have a drop any any above this rule I see IP's from all over the public internet hitting my Palo Alto and being accepted on the intrazone rule as the traffic is

GP saved password removal

GP client was set to save both username and password.

Customer wanted to have this changes to no-longer save the password.

I changed the client config settings to "save username only", but the user is still not asked to enter their credentials.

Do we ne

Firewall not Import to Panorama

 Multiple Firewall are configure on Panorama. All the devices are successfully uploaded to Panorama. Now,I am making all the changes through Panorama to firewalls – which are being pushed to the firewall. But for one firewall,If made few changes to

Minemeld on AWS cloud

We are planning to install Minemeld on our AWS cloud using the cloud formation templates link provided in the Minemeld portal Homepage. But the  Install Minemeld links are outdated and it is not working. The AWS cloud formation templates are restrict

DNS Application uses more DP CPU utilization

Hi,

We are facing issue with DNS Application, it uses more DP CPU Utilization 60 to 70%.

We have done DNS Application override but no luck.

Please find the DNS Session details below.

Mem-Pool-Type MaxSz(KB) Threshold MinSz(KB) CurSz(B) Cur.Alloc Total

Clear text traffic to DLP

What do you guys do to send clear text or SSL decrypted traffic over to a nDLP for further action?  In my case, the nDLP only support ICAP in order for it to accept traffic from its peering devices. Since PAN doesn't support ICAP at all and I am in s

OSPF Area -> vritual Router > Hello Interval set to ZERO

Hello,

I would like to know if PAN OS supports FAST OSPF HELLOs (currently supported by all major network gear vendors, like Cisco, Juniper, etc) and, if yes, how could this feature be enabled / configured.

Moreover I was wondering how would the Virtu

Fighting the cli ... sigh - how to import a cert via the cli

Hi

So, silly me I manage my cert in panorama, so when my int CA for my management ports came up for renewal, i renewed, and pushed out to all the devices ... except for my panorama 

now I have cli access only.

I have found the location 

configure

panora