NAT without braking current IPSec

Hi All, 

Need some help regarding my dilemma.

IPsec tunnel between Site A and Site B.

Static route for this tunnel is setup to forward traffic to only on subnet (10.100.x.x).

I am working on updating patches on server that is under Site A.

I need a

PCI DSS 3.2.1 Responsibility Matrix for SaaS Services

I've been looking for any details from Palo Alto regarding the responsibility of controls for PCI 3.2.1 when it comes to SaaS and PaaS offerings such as Prisma Access, Wildfire, XSOAR, XDR, etc.  Most service providers will publish a 'responsibility

PA-220 maximum PAN-OS version

Hi All,

May i know what is the maximum version of PAN-OS supported by PA-220.

I am migrating PA-500 to PA-220 can i just import the config snapshot directly from PA-550(PAN-OS: 8.1.18) to PA-220(PAN-OS: 9.1.0)?

Please suggest. If there is any link wh

Panorama - Administrators user - Required Password Change Period (days) - Pan-OS 9.1.14

Panorama - Administrators user - Required Password Change Period (days) - Pan-OS 9.1.14

Good afternoon, Thank you for your collaboration and your time

I am doing some tests in relation to Minimum Password Complexity -Enabled, mainly to force the

[ASK] Newbie Guide Installation - Failed Booting paloalto-9.0.4 on Eve-NG

Hello guys, I'm a newbie and want to learn about Palo Alto Firewall. I have some problem with booting up Palo Alto in Eve-NG. It appears like this when booting up Palo Alto

PA-440 Pair and license type

Hey guys,

First of all please accept my apologies if this question is boring for some of you. I'm new to Network Security world and I need some guidance and additional details around licensing. What I want the fws to do is quite simple but the lice

allow Admin account to log in to one browser at one time and not multiple.

Hi All,

Can i check if it is possible to allo  the same admin account to login only 1 browser at one time and not muliple browser?

Unable to revert local changes to aggregate interface

Hello all,

I have an issue with a couple of HA Palo Alto firewalls managed by Panorama.

I was doing some tests for LACP and I overrode the configuration of an aggregate interface enabling LACP. Then I disabled it again from the firewall GUI (not from

Subinterfaces with same VLAN tag

Hello

We are designing a setup with PA 3060. On that we plan to have 2 vsys, lets call them V1 and V2.

I have an aggregated interface, lets call it ae22.

I want to create 2 subinterfaces:

ae22.1 ----- will be assigned to V1

ae22.2 ----- will be assigned

PA 10.0.1 not booting on eve-ng

while booting PA10.0.1 on eve-ng getting the below message and getting stuck after that.

"Booting 'PANOS (sysroot()' root (hd0,1) Filesystem type is ext2fs, partition type 0x83 kernel /boot/vmlinuz ro root=/dev/sda2 init=/sbin/init_single_core cons