We are transitioning from a 7K, 5K, 2K EVPC environment to an 9504, 93180, 2K one.Can FEXs be dual-h...

Hello,The WSA is blocking images on Amazon, GMail, and several other sites. Any advice on how to tro...

I'm a little confused.Traffic wouldn't originate from 10.16.40.199 and be destined for DMZ-2 because...

here are the rules under the "site-to-site" ACL manager:

Hmm, there is no rule with a source of DMZ-2 to Palo_VPN. Are you implying one is required? I'm not ...

10.16.40.199 lives on interface DMZ-2 off of the ASA. If I understand you correctly, you're saying I...

Unfortunately this environment doesn't allow remote session management. I reversed the order and now...

I changed the rule to permit, but now see the attached denial. The rule reported as denying the flow...

Your understanding is correct. 10.16.40.199 is reachable from the ASA.PT results attached.Wondering ...

OK.The crypto map now only has 10.16.40.199 to 1.1.1.1. route Palo_VPN 1.1.1.1 255.255.255.255 20.1....

My apologies for the confusion. I updated the drawing.I'll run through each of your recommendations ...

Yes. 1.1.1.1 is a loopback address in the Palo Alto.

Thanks for jumping in. I can't post the entire configuration, but below are all of the route stateme...

Hello,I have a an IPSEC tunnel between an ASA5510 and PA820. When sourcing ping from 1.1.1.1 to 10.1...

Hello,Users have complained of slow Gmail acccess. After close inspection, it turns out that traffic...