Failed to handle CONFIG_UPDATE_START

Hi All,

I am getting this error while committing (Failed to handle Config_update_start)

I have also gone through kb's articles where i found this is due to high dataplane utilisation.

this error occurs due to High dataplane which increases from  ED

PA-5450 MGT-A and MGT-B Management Ports configuration

Based on the PA-5400 MPC Component Descriptions, the MGT-A and MGT-B management ports are bundled by default as a LAG:

"Two SFP/SFP+ management ports providing 1/10GE connectivity that are used to access the management interface. MGT-A and MGT-B ar

Help me to fix this issues /possible solution

 I am going to configure  Palo alto 5250 firewall to   branch   Huawei router  

The device is not physically connected ,  i try to  do static route from Palo alto to  Huawei router router but the network is not reachable.

kindly support me how to f

NAT configuration

Hello

I would like to have your support to help me for NAT configuration for both scenario

Scenario1

Our customer request to create an IPsec tunnel between us (mycompany) and Customer. Our users need to reach Web server hosted on Customer site vi

Release Date Information

Does anyone have a list of release dates for all software update versions of PAN-OS for 11.1 , 11.0 and 10.2? Thank you.

Standby firewall restarting on 11.0.4-h1

Upgraded my 5250 firewall pair last week to 11.0.4-h1 for CVE-2024-3400.  Since then, have seen my secondary/standby firewall reboot twice over the course of a week after a error of "HA Group 52: Dataplane is down: too many children exited".  This ne

Amber LED on PA3220

Hi All,

I am getting amber LED on the firewall PA3220. 

Observed alarm is active for Temperatur : Qumran Switch Core. Can anyone know what is causing this issue and how to resolve. all other alarms are False only this alarm is true.

show system e

Should we block HTTP range requests?

I have found a few short discussions about how to block range requests, and an article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJsCAK.

My question is whether we should be blocking them because they present a thre

Error Encountered Bringing Up PaloAlto VM in ESXi (6.5)

PANOS 10.2.8 NOT recommended: S2S VPN IKEv1, IKEv2 Prefered does not work anymore

Hi Everybody,

We updated from 10.2.7 to 10.2.8 and had a lot of troubles with our Site-2-Site IKEv1, IKEv2 Prefered gateway connections. I'm not sure if the IKE Version is the root problem, but that was the pattern that was visible in the short tim

DDoS Profiles

How does one go about getting the realistic values for your environment to plug into the DDoS profile or even the zone protection profile? How do you see how many SYNs you are getting per second/min etc?

FW Outbound policy

Hi

What is the best practice policy outbound from the FW itself (i.e management )?

Allow any out? *.palotalto.com?

Need to allow dropbox sharable url and rest of everything block

Hello ,

we got one request from user that he required only access sepcific sharable url only and rest of dropbox traffic blocked . Please help with this, as user have some pdf which need to download with dropbox specific url (that dropbox url share