PBF and Tunnel monitoring failing

Hello

I have strange intermittant issue with PBF and Tunnel monitoring. If I disable the IPsec VPN at both side and bring it up PBF and Tunnel monitoring is working at configured. ( Shows as up ) I have configured a monitor IP destination of an addres...

Understaanding MSSP

Hello brothers,

Plz i really need your help, we have a big project with a big Service Provider, it's the MSSP, i know the concept but technically i don't know anything.

As i understood, the MSSP is a security as a service, the Service Provider host th

user activity ACC -CLI

Dears

I want to know the IP of this user "None",as per to a below image, through CLI ...Can I do?

Please feedback with the command or the way to know who it is ?

thanks

commit status warning part II

Here is another interesting commit status dependency warning

"Rule 14 application dependency warning: Application ms-update requires ssl be allowed but ssl is denied in rule 15. " Why is an application in the rule above getting on a rule below it?

Source IP for SSL Forward Proxy in Virtual Wire Mode

Can someone tell me how to know/what would be the Source IP address for an SSL Tunnel Proxied from the PAN NGFW while running in Virtual Wire Mode ?

My topology is very simple:

User (Virtual Wire) ----> PAN ----> Internet

Does the Firewall initiate t

PA200 failed to discove rin SNMP server

Hi.

I have PA200 (PAN 7.0) device with snmpv2 enable but failed to discover in SNMP server.

When we did snmpwalk from server its giving message "No Such Object available on this agent at this OID".

Appreciate if some one can provide the exact cause of

S2S VPN between PA 3020 8.0 to Cisco ASA 9.x code.

First thing,

I know there are postings about this out on the web and community about this. The problem I'm having is everything out there is on old ASA code. 

I'm trying to understand the configuration on the PA. I have my tunnel interface configured,

commit status warning on rules that are working the way I want them too

I have a rule that has webex enabled but dones not have ssl enabled and i keep getting a warning on that rule when i commit that says "Applicaiton 'webex-desktop-sharing requires ssl be allowed? But I don't want to allow ssl, so how can I get rid of

Enforce Connection for Network Access

I want to see traffic over GP. In my understanding GP Portal configuration Enforce Connection for Network Access is Force networt traffic via Portal IP.  But it connected and not traffic registered under PA. 

Intermittent Aged-Out Traffic

I am hitting an issue where sessions are ending for the reason "aged-out".  Go figure the problem doesn't present itself readily when I have Support on the line.

The Setup: I have two ISPs.  One (I'll call it SummitNet) is an asymmetrical 30Mbps up /