XML API - Need to replace services for a security rule via XML api - currently api call is appending new port

Hi - I create a service (tcp-443) and then create a security rule that uses this service as the service member.

This works.

Then, if I call the same API call with the same xpath and provide a different service, say tcp-449, the resulting security rul

Connection between PA-5020 and Cisco 9407

Hi there,

I have 2 sites on 2 different locations. On the first one i have a core router Cisco 9407 and on the other site i have a Firewall PA-5020. Since the ownership of the line between the sites is not ours do you have any suggestions how to conn

DicksSportingGoods Feedback

If you’re questing for a baseball product or cycling accessories, you can assure the goods of **bleep**’S sporting. Are you aware of **bleep**’s?  It’s the biggest provider of athletic types of equipment in the United States, and their shops are scat

Panorama Plugins

hey,

do anyone know if paloalto intends to open the plugins infrastructure so customers can add plugins to enrich panorama functions, menus UI and functions.. like other vendors have ?

Send Cisco ISE RADIUS attributes to Palo Alto to define policy

Hello,

We are running Cisco ISE 2.1 and we use one IP pool for wireless and wired corporate computers.

Is there any way to inform Palo Alto through syslog about users or groups (RADIUS Attributes) so different policies can be finetuned based on the co

Automate Minemeld .lst entries

Needing Automation.  Our Security analysts often send an email with URL(s), IP(s) that need to be Allowed/Blocked.  We have experimented with EDL and Minemeld and are successfully using each.  We are going to consolidate to using only Minemeld for th

Policy Based Forwarding - Enforce Symmetric Return

Dear All,

I integrade PALOALTO to Tacacs+ for authenticator, but I got message error as below

Authentication to TACACS+ server at '192.168.101.46' for user 'user1'
Server port: 49, timeout: 10, flag: 0
Egress: 192.168.101.42
Attempting CHAP authentication

Recent SAML integration with Global Protect

I've recently moved from using RADIUS authentication for Palo Alto and moved authentication over to SAML so I can integrate with Duo Security.  With this change, the domain info is no longer passed by SAML to Global Protect thus breaking several poli

ADFS: Importing XML fails due to buffer size

When I try to import the ADFS XML file into PAN, it fails with an error regarding the buffer being only 10k lines while my import is 10,288 lines.

Anyone have any idea how to fix this?

VM-serries firewall for aws ECS cluster

How I can deploy VM-series Auto scaling for ECS cluster.

I already have ECS cluster, vpc, subnets on aws and subscription of VM-Series Next-Generation Firewall Bundle 2 on aws market place. I need to configure VM-series firewall.
Could any one help me

Palo Altp - Cisco WLC Anchor - Foriegn

Hi

Created a new zone on PA ether1/5 configured all interfaces.  Installed a Cisco 5520 WLC as and Anchor WLC and setup piolices to allow the Capwap tunnnel to the Foreign WLC.

This was a 1 legged approach, WLC in LAG

This worked, tunnel is up and stay

dynamic interfaces (DHCP) and full site to site

Hi 

I have Palo-220 that move every X- days from one office to another office 

the Palo have a Lan interfaces and wan interface

interface Wan (eth1/1) configured with DHCP and automatically add a default route checkbox 

also i have a full Site2Site tunn

SDP Issues with VOIP deployment

Hi There,

We have a hosted mitel voice solution that we are seeing call quality issues in the inbound direction, ie calls in. I am attempting to troubleshoot this with our provider and they are seeing SDP attributes being added from our firewall.

I'm