Hello, i want to know function of auto-commit during PAN-OS rebooting. If the auto-commit failed, how does PAN-OS works?
Dear:
Good afternoon, is it possible from my LAN network, to connect via Global Protect, to the external portal/gateway of my Firewall ?
I tried, despite having the permissions at the policy level and it fails to establish a connection.
Is it strictly
...
I am planning to upgrade firewall cluster from 8.1.18->9.0.14->9.1.11.
9.0.x says override tab is removed.
Is it the case with 9.1.x as well?
I have lot of domains in override.
Hi,
We are having slowness in a traffic when the destination in the security rule is a address-group. If we configure "any" in destination the session are fast. The traffic is 443 (web-browsing).
How PA can cause slowness in https if the destination
...
When you have multiple device groups, are you able to create shared security policies? When I try to select shared and create a security policy rule, the zones are blank.
Only workaround I can seem to find is create a security policy in one device g
...
Hi,
Came across an issue where a PBF policy match works in the CLI, but not in the GUI. When you run the test in the GUI it just hangs. The PBF rule is working as expected in production, its just the test in the GUI that seems to fail. Anyone come ac
...
Hello everyone,
We have a Firewall configured for Authentication for LDAP and RADIUS NPS.
Both works fine when I force the authentication profile using CLI:
test authentication authentication-profile LDAP username user password
test authentication auth
...
So my company is working to setup a new PKI infrastructure with smart card logins for the users. I have looked at all the 2FA and associated articles about setting up the VPN but it leaves a lot to the imagination. I followed the steps creating the c
...
Hi,
Is it possible to ping a IPv6 link local address from a Palo Alto firewall? If so, what is the syntax on the firewall CLI?
I know other platforms allow you to define an outgoing interface when pinging a link local address, but this doesn't look t
...
I have two PA3050s Active/Active, where I already have E1/12 configured as type Layer 3, no sub interfaces. Is it as simple as doing the LACP configurations on the upstream switches and then converting physical interface E1/12 type to Aggregate, then
...
Hi,
In this tunnel with a FortiGate, I see the FGT sends its peer id as a local IP and not as the IP which takes part in the tunnel ..
So I just modified the peer identification for the local PA to match the FGT private IP peer IP and the tunnel has
...
I’m facing issue to edit or delete in old rules before create my user account in Palo Alto firewall when I login individually but I can do edit and delete old rules from panorama.
what will be the issue and those firewall not connected with panorama
...
Hi everyone,
Ignite 2021 is just two weeks away and the LIVEcommunity team has been sharing weekly blogs to keep you updated on the latest news related to this event!
Last week we shared information about the Agenda. We also added some informati
...
reaper
on:
What does ch mean in PA-VM-OS Software?
OtakarKlier
on:
PCNSE Bootcamp
