MFA Authentication

I need to configure MFA for administrator login, we would prefer second authentication through e-mail  or any mobile APP token.I am unable to find exact document to configure , could you please help us to configure MFA in our Paloalto device.

Troubleshoot/debug scep

Our pki team has setup a scep/ndes server for us to use for new firewall we setup. The error i get in the gui is not saying anything. If I would like to start a debug on the firewall cli for scep. Where do i do that?

Panorama version 9.1.4

Since i can see the stable version mentioned for panorama is 9.1.4,but when i go to support portal under panorama base images to download 9.1.4 i cannot the file...i am looking to install it on vm/esxi.

Let me know the stable version from 9.1.x and 9

why the config logs is not capture?

Hi,

We have observed that “activating” a GP client version is not captured under configuration logs.

1.        Is this because no commit is required for such an action?
2.        Is this expected behaviour?
3.        How can we check on the history of such a con

PA 200 Connected to 4G Router

Hi Folks,

We currently have a primary direct internet from the ISP to the Palo Alto PA-200 configured with LSVPN .

As we plan to have a secondary Internet, we want to connect the Palo Alto PA-200 with 4G Router using LSVPN as well. 

The problem is the p

OSPF: more detailed logs?

We're still experiencing the occasional OSPF adjacency drop, although it's much improved since our changes over the summer.

However, the log entries in the System log is anything but useful:

Monitor Traffic Shows Sess Still Active over Tunnel Even After Int Failed

We're provisioning and testing a dedicate wave circuit and an Internet-IPSEC backup between two PANs. (We are also running IPSEC over the wave circuit). We noticed a phenomena of sorts and was wondering if anyone has experienced this: We purposely fa

Redirect one URL category to another domain

Hi everyone , 

is there any way to  Redirect one URL category to another domain . For example  all news to CNN.com

Panorama and User-ID Compatibility (9.0) with NGFW in 8.0

Hello,

We are being affected by a bug that disconnect the Virtual-Wire interfaces in the switches. We are in 8.0.8 version and we wanted to upgrade to latest 8.1. We discover recently if we upgrade to 8.1.0 the bug doesn't affect us and the TAC tol

Device certificate expires in 3 months

hello,
I recently installed the device certificate on the FW but the certificate is valid for only 3 months. Do I have to install it every 3 months ? Thanks! 

BGP Routes redistribute into OSPF_Match Tag value

Nexus switch is learning AWS routes ovr (Ebgp)BGP and has a tag with AS Value.

This nexus switch advertises routes learned from AWS to Paloalto firewall(Ibgp)

We would like to create redistribute profile which can redistribute only routes which have ta

Panorama CLI commit process

Hi ,

Could you please confirm the cmd equivalent to "commit and push "  in panorama .

I am trying to commit the changes using Panorama cli . I tried using commit partial device group <name>  but changes are only showing in Panorama not on the firewal