If I perform a factory reset on PA500 OS 8.1, eill I loose the licensing?
Palo Alto Networks NGFW Best Practice Assessment (BPA) via the Posture API Client & Partner Implementation Guide — Windows PowerShell Workflow Purpose This guide provides a practical end-to-end procedure for generating an on-demand Best Practice Assessment (BPA) from a Palo Alto Networks firewall configuration using the Strata Cloud Manager ...
Hello, Is there an ETA for a Gen2 Panorama image that supports the newer Azure v6/v7 instance types?
The customer is unable to accurately monitor Data-Plane and Management CPU/memory utilization on Prisma SD-WAN ION 1200-S-C5G-WW (Tenant ID: 1285229497, Firmware 6.5.3-i-b10) via NetSpyGlass because previously provided OIDs for these metrics return 'No such object', and required ION-COMMON-MIB and ION-SMI files are not recognized; initial issues...
Hi, I have HA1 link traversing 2 upstream routers - if one of the routers goes down, both FW lose HA1 and thus; both become Active. Is it possible to configure HA1 backup over an existing LAN side link? i.e. not using a dedicated port for this but using a sub-interface / existing L3 interface etc? thanks.
After upgrading to panos preffered version 12.1.7-h3 my ikev1 ipsec tunnel with ipsec crypto md5,3des,nopfs is not coming up , knowing that ike phase 1 is successful but ike phase 2 is giving no proposal chosen error , the algorithms matches the other peer and i tried downgrading the tunnel came up, i would appreciate any help
Hi everyone, I recently set up GP user-id mapping in our network. It's showing domain.local\username in the logs. I was also told to set up User-ID mapping using the windows agent as well since our users would need to disconnect from GP occasionally. The logs that we get from the windows agent is domain\username. Issue now is that when we se...
So I have a active/passive ha pair of 3410 firewalls. I need to move interfaces during production from ethernet1/1 and 1/2 to ethernet1/13 and 14 for 10gb bandwidth. Any best practices with minimal downtime? Thanks
Installing clientless VPN 98-260 is failing on PAN-OS 12.1.7 with the below error. "Checking for IMA manifest signature fileERROR: No IMA manifest signature file found!" Is there a plan for a clientless vpn version to fix this ? can we know a ETA ?
We are changing our hypervisor platform from VMware to Hyper-V. Our normal migrate process (Shutdown, Backup with Veeam, Live Migrate to Hyper-V) failed with #Panorama, perhaps not unexpectedly How can I migrate my current setup?
This is a remote location with a Starlink connected directly into a Palo Alto 510. We have another backup satellite connection provider which should be used for emergency / comms only when Starlink goes offline. Starlink renews its DHCP lease every 5 minutes. Normally, this works fine, and gets renewed successfully without interruption. Once...
Just a heads up to the community apparently there's an issue with firewalls that are 12.1.X that are configured to be managed from Panorama. Apparently PAN-322826 exists where any hardware that's Panorama managed can spontaneously suffer a hardware reload due to a "configd" memory leak. (A 4 months long case finally got us this info.) To my k...
Has anyone else recently experienced problems with DNS Proxy stopping responding to client DNS requests? I run DNS Proxy on multiple sub-networks, such as our public Wifi zone, along with spyware/URL filtering for preventing access to malware/prohibited/etc. domains. The Security Policies prevent access to proxy avoidance and encrypted DNS. Fo...
I am having a hard time uninstall GlobalProtect version 6.3.3 The error message is saying The installer has encountered an unexpected error installing this package. This may indicated a problem with this package. The error code is 2503. I am trying to uninstall the package via Control Panel and it is giving me this error. I deleted all of the ...
Hi All, All our PA is managed by Panorama and there are a couple of HA pairs in our environment. we just want to change one of the HA pair to standalone. Currently our set up is active passive. We would like change to standalone on both device. Is there any steps to make this happen? Thanks !!
reaper
on:
No proposal chosen ikev1
| User | Likes Count |
|---|---|
| 8 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
