ipsec site to site vpn

Hi,

Do I need a tunnel interface for site to site vpn ? 

If yes How can I do that and what is the benefit 

Thanks 

firewall using wrong LDAP attribute to find user in active directory

Hello Community,

I´d like to check with you the following issue:

created a LDAP authentication profile which is not working, when using the "test.... " command I get an authentication failed with "Received empty DN for user User12345"

I made a traffic

Orange attack on GP

https://blog.orange.tw/2019/07/attacking-ssl-vpn-part-1-preauth-rce-on-palo-alto.html?m=1

Any word from PA on this ?

Global Protect One session One user

GP can support One username login one session or not. If yes where is configuration at GUI

Why is decrypt failing for this site

Hi

myeverythingdisc.com

my PA's use the unsecure CA..

tring to work out why.

Last I checked there was no log so ...

GP client fedora certificate

HI,

We are trying to go up a VPN using Global protect client in fedora device. We have read that global protect 4.x requires that the certificate be signed by a trusted CA. Our certificate is self-signed. So we have GP client version 3.1.x because we

Neflow issue

Hi Team

We have PA-5060 with 8.0.11 h1 PAN os version.

Configured the netflow profile on WAN interface. Its sending the logs to the PRTG tool for some minutes then firewall stops sending the logs.

So we have changed the netflow port 2055 to another p

Current stable release for PAN-OS 8.1

Hello,

I was hoping someone would be able to tell me what the current stable release for 8.1 is? I am planning to upgrade from 8.0 in the next couple of weeks. I see that 8.1.8-h5 has been available for over a month so was wanting to check if this or

site to site ipsec vpn question

Hi,
I have cisco cucm  on Head Office and Branch there is phones also 
cucm server ip is 10.0.2.10 and phones are head office also in the same network . And I want phones in branch also in the same network ( it 10.0.2.10 ) 
Can I achieve these using ips

New to Minemeld for O365

Hello -

So I followed these instructions as best as I could (new to Palo Alto as well):

https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld-Updated/ta-p/224148

My issue is, how do i know i

how to force reauthenticate captive portal when cookie is enabled

Hi,

is it possible to do that

with commands clear user or debug user-id reset captive-portal it is not logging out.

Thanks