DNS proxy

Hello

In one of my subnets I'm using google 8.8.8.8 as DNS server (received via DHCP).

But only form one entry I want to provide my own FQDN and IP.

Could I use DNS proxy feature for this ? (enable DNS proxy with primary DNS server 8.8.8.8 and add stati

NFS datastore change

Customer integrated NFS datastore with panorama to store logs.

Now they are planning to change old NFS data store with new NFS data store, But their concern is they want old NFS datastore logs to be retained in new NFS datastore after migration and t

SSL decryption troubleshooting

I am trying to get SSL Forward Proxy working properly, generally it seems to be OK but I have a site I have tested

is for the bank hsbc

that gives an error..

Certificate Error

There is an issue with the SSL certificate of the server you are trying to

HA traffic through Cisco Switch

Hi Team ,
Can we route HA traffic between two 3260 firewalls through cisco switch using L2 vlan.

 My requirement is to run firewalls in HA and devices will be in different buildings. Buildings are connected with dark fiber. As PAN dedicated HA ports ar

Anyone else notice these "Load Config Partial" syntax changes in PAN-OS 9.0?

Doing my first migration to PAN-OS 9.0.  We've migrated the config using expedition, but when I try to use the load config partial commands I keep getting a "Invalid syntax." error

Example on how it used to work- 

load config partial from MT-fixed.xm

Weird GP source username on traffic logs

I came across this weird source name on the traffic logs while checking a GlobalProtect issue. Has anyone seen this case? Other users' logs are displayed with corporate\domain correctly.

VPN

Hi. who can help me this topic?

Person A must configure vpn with person B. Person A must configure two vpn connection and all data flow to vpn 1 node but if vpn node1 goes down, aoutomatic all traffic must flow through with node 2.

Free space in /dev/md2 partition

Hello
We have a Firewall PaloAlto with free space 509MB in partition /dev/md2, and 609MB in partition dev/md5, actually we need to upgrade the PanOS since 7.1.18 to 8.1.12, and there are 5 PANOS to upgrade, so the information is keep in /dev/md5 but b

How to block Internet Explorer

I am trying to block Internet Explorer traffic going out to the internet from my internal users. I have decryption in place and followed this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEdCAK

I am seeing some w