Cloudflare using 1.1.1.1 (Palo Alto recommended ipv4 DNS sinkhole IP)

Since PA recommends using 1.1.1.1 for DNS sinkholes I thought it would be interesting for those of us following this practice that Cloudflare is now using 1.1.1.1

https://www.theverge.com/2018/4/1/17185732/cloudflare-dns-service-1-1-1-1

IKEv2 renegotiation on acceptor gateway reboot

Hi community,

I have a site-to-site IPSec connectivity with Palo Alto gateway (PA-VM 8.0.5 on kvm hypervisor - CentOS 7 host) on one end as initiator and Vyatta OS based gateway on the other end as acceptor.

When IKEv2 and IPSec (and BGP) are in esta

PaloAlto Managed Services Question:

I have a question pertaining to Palo Alto's Managed Services business.

Does Palo Alto have its own Managed Services business where they service end clients directly?  

Another way of asking this is, does PaloAlto only use the partner channel to deliv

Layer 1+2 decisions for PA820 HA pair

This is my first time having the luxury of two ISP's and redundancy in all hardware - I was tryingt to research best practice for wiring the PA pair as active/passive router/nat - I found some mentioning of using port channels to achieve local reduna

2nd default route

My PA already has a Default Gwy pointed to the current Internet provider. I got a new Internet provider and I'd like to test the Internet connection by only allow my traffic to go to the new Internet connection. What is the side effect if I add anoth

Captive Portal doesn't redirect

Hi Community,

I'm getting mad....

I configured a simple captive portal in my testing environment with saysing: everything from host A to untrust with tcp-443 and tcp-80 will be captive-portaled - so far so good.

I configured the captive-portal in the u

Source User Doesn't Show

Dears,

          I have a problem with uses coming from WIFI and non-joined domain the source user doesn't show and show a blank please find the image.

I have installed the CA's for our domain and the PA put didn't work.

Our infrastructure as shown bel

IPsec Vpn tunnel was down

PA-850- 8.0.6-h3  Customer complains IPsec  was down how can i check it on gui sytem logs or via cli.

Ihave checked the Moniter>system logs and  couldnt find any logs  related to "tunnel-status-down"

Thanks,

Ranji

"Deactivate License" : Where did they go and how can I reuse them?

Hello everyone,

Has anyone actually used the "Deactivate License" feature to unlicense a vm and then license another vm?

My goal was to move licenses from a v7 vm100 to a v8 vm100 on new hardware.

I successfully deactivated the license on one of my 6

HIP check - check if a non running process present

I configured a HIP check for a non-running process, but the GP doesn't detect it.

Have someone got it working?

SSL decryption inbound issue

Issue User-ID Agent some user mapping long time

Hi Expert ,

I found issue about UIA which some user logon into network sometime IP   mapping user  long time or sometime not  mapping I must use clear user mapping and  every time and ip map user on AD  , I would like to know why user  mapping longti

Traps - How long does it take for a new agent to appear on the ESM console?

Hi all,
I'm installing Traps on new Hosts, but once installed they do not appear on the ESM console, does this take a while?

Shutdown/Disable MGMT interface due to DNS issues

Hi Guys,

I got a simple question for you:

Is it possible to literally disable/shutdown mgmt interface, via CLI or webUI, in a VM enviroment when is not needed?

I notice a DNS issue after we have deleted the IP address assigned to the MGMT interface v