Knowledge sharing: Troubleshooting and investigating full hard disk and full partitions (logs, config, root, etc.) issues on Palo Alto devices.

When the Palo Alto partition is full depending on which partition is full differen issues may happen. The Palo Alto versions like 9.1.x and newer have much less issues with disk space like the 8.1 version, so an upgrade to newer version may help in m

Destination Nat using ISP Pool address

Hello All,

Need to configure destination Nat with Nat Pool Provided by ISP.  Below are the ip details :

182.72.150.0/30--Wan IP Pool

182.72.150.2/30--Configure at Palo Alto Interface

182.72.150.1/30--ISP gateway IP

182.80.48.176/29--Lan IP Pool Provide

IT configuration and change management

Hi, Could someone help me with info on implementing configuration and change management for PA firewall's deployed in a large organization .

Thanks

MindMeld, I can login to the CLI but not the GUI

I am capable of logging in to MindMeld via SSH but I cannot login to the CLI. Not sure what the problem is here. 

Content updates compatibility with firmware

Hello All,

PA 850 has been delivered at my office with firmware version 9.1.4 and my company has also purchased Threat Prevention, PAN DB Url Filtering & Wildfire Subscription license. Basically i need to upgrade my device to latest firmware of 10.0.

Problem with CDN and AVG Update

Hi

I have an issue about AVG and CDN. I used PA 220 with Details :

1. AVG Update

Regarding this issue,

Minemeld automatic updates required for future Azure Public IP changes and additions

We have a JSON file  from the URL below which is updated weekly:

https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

Ideally, we would like to pull a list of IPV4 IP addresses out from the section  "name": "AzureIoTHub", which needs

Network Packet Broker

Can network packet broker feature (in PAN-OS 10.1) be used only to mirror some traffic and not expect any return traffic? Like port mirror on switch.

questions about Palo Alto Networks

U-NAT Double NAT - DNAT

Good morning, first of all thank you very much for your support.

I have the following case scenario:

FQDN: Dyndns ( paloalto01xxxalias.dynalias.net )
Modem/router/ADSL dynamic IP Public
Modem/router/ADSL LAN IP 192.160.1.254
Modem/router/ADSL NAT1-1 to Pa

Accessing a specific website triggering Spyware THREAT signatures

Accessing following website is generating Spyware THREAT signatures. Does this means website is compromised and access should be blocked?

Website: 

www[.]51qiti.com

www.51qiti[.]com/faq/Faq1217.htm

Triggered signatures:

Suspicious PHP Command and Contro

How are unused objects calculated

I couldn't find a definitive answer to a question regarding the discovery of unused address objects found by Expedition.  According to the manuals, unused address objects are those not referenced in a security or nat rule.  However, an address object

Import/export settings

Hi everyone there is an export to csv/pdf option for rules/objects. 

is there an import button ? I would like to export these setting to another firewall surely I don't have to mess around in the CLI for this ? if it can read from the config locatio

Login issue for TACACS user in Palo Alto NGFW

We are not able to login into Palo Alto via TACACS user.

PA NGFW is asking for reset password before login.

We are not able to reset password.

We have reset password complexity by login with another local user.

We have not assigned any admin roles for TA