General Topics

Resolved! Change forward decrypt trust cert to a new one.

I have forward ssl decrypt running and I want to change the cert I use. Can only have one forward trust cert at a time. If I deselect forward trust box I get commit error because my ssl decrypt policies don't have a forward trust cert. I can't select

...

Palo Alto Session count - Session per second - Connections per Second

Palo Alto Session count vs Session per second vs Connections per Second

Hello good afternoon community, I hope everyone is well.

Can someone help me regarding some values that I need to clarify and confirm that they are the following

For Palo A

...

GP Issue while Migrating from PA-3020 to PA-460

Hi All,

We are facing GlobalProtect issue when we migrate from PA-3020 to PA-460. All the Configuration has been replicated. Users are able to connect to the Global Protect without any issues. Also users are able to connect to the local network witho

...

Global Protect Pre-logon load balancing across 2 separate PA5020s

HI, We currently have DNS round robin configured for our on-demand GP connections across 2 separate locations which host different PA5020 firewalls. We have a public A record pointing to both public firewall IPs and the clients then connect to either

...

Resolved! PA 3220 function as a secondary / sub-ca

Greetings,

We are researching Certificate management and all the certificate management the Firewall can do. It came across as a question - is there a way to have the PA function as a secondary / sub-ca? Our team members our discussing instead of

...

Resolved! Aggregate interface per cli

Dear all,

I am in search of how to create an aggregate interface per cli.

I am using eve-ng and the option to create the ae via the GUI is not available.

much appreciated.

HoneyPots?

Hello,

A bit off topic but still security related, just curious who out there uses honeypots. I know google is a good resource but want to get actual user feedback. What works, what doesnt, top level info is good.

Thanks in advance!

Prisma SD-WAN vs PAN-OS SD-WAN - Focused on SASE

Prisma SD-WAN vs PAN-OS SDWAN ... Focused on SASE

Hi good afternoon, as always, thanks for the time to answer and the good vibes. Today there is some confusion regarding these different variables, whether to use Prisma SD-WAN i.e. CloudGenix ION, to

...

DHCP Options

Hi All,

I need to send DHCP option 119 to my clients that are using the Palo Alto as their DHCP server.

Please can you confirm whether this is possible or not?

Thanks,

Jaggie

Question about Management Interface

Hello All,

My current management IP is set to a private IP and is up and pingable from the PALO ALTO command line. How ever I cannot log onto the management IP via WEB GUI...

Does the management interface correlate to the physical management po

...

PA-450 Internet Traffic stops after 15 minutes

Replacing 2 Cisco M400 firebox with PA-450, mirrored the NAT and security polices from the M400 onto the PA-450. When we switch over the firewalls we get internet traffic both ways as expected but after 15 minutes all in and outbound internet traffic

...

PAN-OS 10.2.3 - HA1 PRTG bug - PA-220

Hi,

Since updating our firmware to 10.2 we have noticed that ha1 shows down in our monitoring tool but is showing as up on the device. Has anyone seen anything like this before? This is on multiple devices and has not effected the PA-800's.

Th

...