PAN-OS 10.2 on PA-220

Hi All,

I was just wondering if anybody had any experience of 10.2 on PA-220 I am thinking of upgrading and haven't heard anything concrete either way.

As always thanks in advance for any help.

How to change the Vsys ID in palo alto

Hi Team,

I have already configured the Vsys ID 15. Now I want to chnage this Vsys ID to 2. Is this possible ?

Please help me here

XDR Agent Disabled

I've installed a XDR agent to a workstation, and it's not connecting to the server. I've installed the  it on different workstations and that's working fine. After the installation the agent never connected to the server and showing it's disabled. Wh

panorama scp export more command?

It is linked to equipment A, B, C, D in the panorama.

I want to extract only the traffic log for equipment A.

  ↓ ↓ ↓ ↓ ↓ ↓ The above command extracts all A, B, C, D traffic logs. ↓ ↓ ↓ ↓ ↓ ↓ ↓

scp export log traffic start-time equal 2014/05/16@1

[ICMP Covert Channel] Allow only ICMP Ping packet that has specific payload.

Dear all,

I am using PA-8.0.0-ESXi virtual machine and I am trying to prevent covert channel communication using ICMP Payload.

For example, as captured using Wireshark, the default ICMP type 8 (Echo request) for Windows machine is abcdefghijklmnopqrs

block IP's in same zone

Is it possible or practical to block traffic between two server in the same firewall zone by designating the source IP from the server you want to block access to the server to the destination server indicated by IP

Masscan Detection

Anyone knows how Palo detect Masscan? 

Palo Alto User Agent ID Services Failing intermittently

We have 2 User ID agents on 2 different windows servers. Both User-ID agents' services are getting hung up and requiring manual intervention of services being stopped and started after couple of days. The issue has progressively been getting worse as

Help License required for SD-WAN to function

The license has been applied to use the feature, but the following statement appears.

only one SD-WAN license.

 There is no communication problem with the updates.paloaltonetworks.com server.

Discard UDP from Paloalto Session TImeout

Hello all,

Recently, customers are experiencing a phenomenon that Syslog traffic coming into the same source port remains in the Discarded Deny Session.

As a result of my checking, it was confirmed that it occurred while being constantly refreshed

PA440 not booting

Hi everyone,

I have a problem after rebooting a PA440. The device simply puts a message on the console that no bootable media has been found and then shows a BIOS-like menu with several entries (boot manager, system setup etc.). However, if I select

Allowed sites not loading correctly

I am new to Palo Alto Firewalls so I am trying to figure this out. In our policy we have facebook allowed and it is not displaying the whole page. Am I missing something? 

P-A 220 Firewall - Basics

I recently joined a company that has some P-A 220 firewalls.  I have access but for now it's "read-only" whilst I am learning,  I am trying to find my way around the GUI web interface but even looking up a device by MAC address doesn't seem obvious.

Device certificate is not renewing automatically

Hi all, hoping someone may be able to assist with an issue.

We are seeing that every 3 months our PA device certificate is expiring which causes issues fetching updates from various cloud services (URL filtering, wildfire, update server etc).

Upo