PA-5220 Version: 10.2.5 - Unable to commit after adding a VIP

After creating the sub interface ae1.1416 and using the address 10.149.124.98/27, we are receiving the error below after adding the first usable address as the VIP with 10.149.124.97
Both palos are in an active/active pair

- We are able make the commit

Developer Edition

Please forgive my ignorance. I am new to Palo Alto and I am wondering is there a virtual device option for me to use (training, testing, developing)?

DNS Dynamic Updates not working when on Global Protect after update to 10.1

We began a step migration from 9.1.13 to eventually 10.2.2. We usually pause at each major update and make sure everything is working before taking the next jump.  I got to 10.1 and hit a roadblock.  We have our laptops check in with DNS and do a dyn

Ignite 2022 CPE Credits

I saw before I attended Ignite 2022 that we would be eligible for CPE credits for the classes we attended at the conference.  Does anyone know how we go about claiming these CPE Credits and getting them applied to our ISC2 account?

LACP What is the interface color when a specific port is down?

Dear Team,

LACP is set as shown below.

AE group: ae2
Members:          Bndl Rx state       Mux state  Sel state
  ethernet1/13    yes  Current        Tx_Rx      Selected
  ethernet1/14    yes  Current        Tx_Rx      Selected
  ethernet1/15    no   D

Authentication error

users in one the gateway facing the error `please click the button below to relaunch authentication` while try to connect VPN .

How to filter routes being exported to BGP neighbor?

We are currently redistributing all OSPF routes to our BGP neighbor without any filtering.  We wish to exclude certain prefixes from BGP advertisement. I need an assistance in configuring the filter for this purpose. 

Q1. Is it going to be working

Palo alto GP with azure SAML

Hi, I was reading about the integration of Palo Alto GP with Azure SAML authentication.

My globalprotect is using port 4433 to access instead of the default 443.

Hence, I'm wondering what to configure for the identifier, a reply URL, and a sign-on UR

Need to suppress alerts that are getting generated as a result of adding a file execution in the restrictions

Hi Team,

We have added the file execution for Quickassist in restriction in XDR console but we dont want to get flooded with the alerts that are getting generated due to it. Is there any way that I could get restrict the file execution but also suppr

super user missing google authenticator problem

Hello
Google authenticator has been deleted on the phone of a user with super user privileges and cannot log in to sso.paloaltonetworks.com.
What method should we use to solve the problem?
Thanks

Commit Fail Phase1 sslvpn

hey

i am gtting commit fail on phase1 abort, and it looks like the SSL VPN proccess how can i troubleshoot it ? 

show management-clients

Client PRI State Progress
-------------------------------------------------------------------------
routed 30 P1-abo