PA-5220 AUX ports for HA1 + HA1 backup

Hi

Tried to setup a PA-5220 cluster and I can't get HA1 and HA2 to talk over AUX1 + AUX2

is it possible ?  The GUI allows me to pick the interface.

Alex

Unable to Upgrade a PA-3050

I've purchased a used PA-3050 that's currently running version 5.06 to 6.0, but I'm running into trouble with first upgrading the content version. I'm getting an error about needing content version 401 or greater.

I've tried to do a content update vi

How to Configure Okta SAML Single Sign-On (SSO) Authentication for support.paloaltonetworks.com

I was looking to configure

SAML-based authentication with sp-initiated flows for support.paloaltonetworks.com

Is this possible configure at this point?

Global Protect Enforcing VPN

Hello, 

I need to enforce VPN so users will not be able to access Internet unless tunnel is establish or wired corporate network is connected. Users should also be required to supply credentials and MFA every time the tunnel is built when accessing fr

Nutanix Panorama Plugin - categories not appearing in DAG

I have configured a Panorama instance with the Nutanix plugin as detailed in these steps:

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-nutanix-ahv/vm-monitoring-on-nutanix/configure-the-panoram

Password Reset using Global Protect App without PreLogon

Has anyone been able to configure their firewall so that users will be able to change thier password via the global protect app while using LDAP for authentication and NOT using Pre-Logon

SSL inspection decrypt error from some client

Hello to all,

We have a linux website that we made working with inbound ssl inspection by disabling curve25519 / x25519.

Some clients report errors ( always showing as decrypt errors on the monitoring) accessing the site: by taking a networrk trace on

Adding multiple client certificate in Linux GP agent

Hi Community,

I have a requirement to add multiple client certificate into Linux GP config. Usually, whe we put 'globalprotect import-certificate --location <cert_location>', the existing client cert will be overridden with the new one and it will be

Queries Regarding Panorama Upgrade

Dear Team,

Please help us to below points...

• For 9.1.3 what should be the VM Sizing for the Panorama
• We are migrating from 8.1.10 to 9.1.3 whether the logging format will change
• There is default behaviour Changes can you give a heads up

Regards

Karthikeya

PaloAlto VM Tools VIX_E_TOOLS_NOT_RUNNING using PowerCLI to Invoke-VMScript

Trying to configure my PaloAlto Firewall (PA-VM-ESX-9.0.0) using PowerCLI scripting, no issue creating & deploying VM, setting up PortGroups, and starting PA VM.  Needing to perform IP configuration scripting to complete the setup of the PA VM, so ju