We are behind zerotier


We have read your wiki and we have seen “If you are behind a Palo Alto, you will need some kind of ZeroTier bastion. As far as we know, there’s no way to enable endpoint independent mapping. Contact us for help.”

So, we need some help about it. How we can do it?


The issue with most enterprise firewalls is you need persistent NAT for STUN like services. Most firewalls have a feature for it.

You can try this from Palo’s website:

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.