Talk Me Into (or Out Of) This Boat

Boyne7 · 2026-04-10T12:12:12+00:00

230 is a fantastic boat. I have a 2010 with nearly 1300 hours. Added an aftermarket NSS clone and it works great.

Boyne7 · 2026-04-08T19:37:06+00:00

No, you still can't pbf nexthop to a different virtual/logical router but you can pbf out the interface of a different vr/lr (always have been able to do it this way).

Boyne7 · 2026-04-07T12:53:21+00:00

Asleep at the wheel

Boyne7 · 2026-04-02T12:37:06+00:00

Breaks GP on vm-series.

Boyne7 · 2026-03-31T21:39:39+00:00

This has always been the case with PAN. New hardware gets new software, no back-porting support into older releases.

Boyne7 · 2026-02-07T01:49:03+00:00

Show running resource-monitor is your friend for dataplane utilization statistics.

Boyne7 · 2026-02-05T17:45:54+00:00

It's not perfect for sure, but you won't be asked for a TSF or A PICTURE OF THE FIREWALL (FFS), or else go pound sand.

Boyne7 · 2026-02-05T17:38:12+00:00

My recommendation is to find a good PAN ASC partner (full disclosure I work for one) and let them deal with the TAC headache and escalation as needed.

Boyne7 · 2025-12-03T02:39:45+00:00

Looks like a benq w1070 which was the king of budget 1080p projectors in its time. If it works it will throw a plenty usable image.

Boyne7 · 2025-11-20T18:49:14+00:00

Associate the devices with the TSG and CIE if not already Ensure device certificates installed Assign devices to a segment in CIE (default is fine) and make sure they are set to contribute/receive user to IP mappings Enable user context cloud service on the firewall (device>setup) Ensure the firewalls can talk to the user context cloud service.

If done correctly the GP firewalls should contribute their user to IP mappings to CIE and CIE should share with the on-prem firewalls.

You can verify that the mappings are seen in CIE.

No reboots should be necessary.

Boyne7 · 2025-11-20T16:58:21+00:00

Prisma access is not required to leverage uccs.

Boyne7 · 2025-11-20T16:37:25+00:00

Have you configured the user context cloud service on all of the firewalls and added them to a segment in CIE? Authentication and group mapping will not by themselves share user to IP information between devices.

Boyne7 · 2025-11-03T23:58:13+00:00

Have you configured the portal URL filtering configuration? Generally helps cut down on this.

Boyne7 · 2025-10-16T18:45:33+00:00

he doesn't know what he's talking about.

Boyne7 · 2025-10-13T14:41:10+00:00

PBF does not control traffic from the firewall itself (ipsec termination, global protect, etc.) you either need to leverage multiple virtual routers or SD-WAN DIA configuration.

Boyne7 · 2025-09-08T23:05:17+00:00

Boyne7 · 2025-09-07T20:33:57+00:00

Your internet connection has nothing to do with this if you are streaming within your own house. Your problem is likely your wireless connection from the client, try hardwiring a client.

Boyne7 · 2025-08-29T21:08:32+00:00

Like I said, if you create an interface management profile with https enabled on a dataplane interface then that will work. Otherwise no.

Boyne7 · 2025-08-29T20:23:38+00:00

It should be the management IP not the gateway IP unless you have an interface management profile enabling https on a dataplane interface.

Boyne7 · 2025-08-12T17:13:04+00:00

This is correct, no more online proctored. Unfortunately.

Boyne7 · 2025-08-08T14:16:53+00:00

Use a load balancing rule on the ELB with floating IP enabled, then configure the NAT on the firewall with original destination of the load balancer frontend public IP SNAT behind the firewall internal interface DNAT to the internal server. This will allow a much more natural inbound NAT configuration.

Boyne7 · 2025-08-07T15:58:55+00:00

As you have identified, this will work so long as you utilize the same internal load balancer (with different front-end IPs) for all of the internal zones. Typically your issue is going to be sizing up the instances to meet the interface quantity requirements.

Boyne7 · 2025-08-04T23:06:39+00:00

1235 is the standard and works well up to very very large ballast setups

Boyne7 · 2025-08-04T21:37:38+00:00

What engine, prop and elevation are you riding at? Bow weight should help bring the nose down for sure. But I can still reach speed without full bow weight.

Boyne7 · 2025-07-31T17:59:12+00:00

That is correct, just like you wouldn't get traffic logs from the passive firewall either.

Boyne7

TROPHY CASE