A Good Way to Document Firewall

Hi all. im about to documentate our firewalls (palo).

We have serveal firewalls, and need to get complaint with some docomentation of our firewalls.

We are on bare ground and are starting from scarts.

any recomendation og template to start from,?

Manufacturing Number on a SPF LX module

Hi All, sorry to ask a trivial question,  a supplier has sold just sold me the following SPF LX module.  I seen that it says "LN#56 5/2019"  In my eyes it means production Lot Number 56, production date 5/2019.   My supplier says "This represents the

trustsec plugin

im working on a airgrapped network, and im trying to implement the panorama with cisco ise and i need the trustsec plugin. where is it at exactly?

LGTV and Netflix bugs out when going through Palo Alto

Hi. 

I have worked with Palo Alto for about 15 years, but now I have run into a really weird problem at home with my lab PA-440. 

I recently changed from PA-415 to PA-440 at home, and after that, my LGTV (2024) and Netflix on my Xbox console just s

What is the Best Practice to block iCloud relay?

What is the best practice method to block iCloud relay without impacting iOS users too much? Apple says to NXDOMAIN the following below. 

Prepare your network or web server for iCloud Private Relay - iCloud - Apple

PA-450 and ATT BGW320-505

Question,  I setup my PA-450 and ATT BGW320; however, I feel there is a loop as the connection sometimes drops or has slow connections on live connections like streaming TV and or live video.  I guess my questions are as followed below.

First, my s

Problems with mail queues after updating PA-5410 from version 10.2.7-h8 to the preferred version 10.2.13-h7

Hi team

We have detected problems with mail queues after updating PA-5410 from version 10.2.7-h8 to the preferred version 10.2.13-h7.

After reviewing the traffic logs, we are unable to determine the problem we are experiencing.

Has anyone had a simil

Proper User-ID Configuration

We have 4 Palo Alto Clusters managed by panorama, each cluster has 2 firewalls, each firewall has number of Vsys.

We want to configure user-ID with the Agent based method.

My proposed solution is to integrate each Firewall directly with the User-ID

Exclude only communications on specific port numbers from Global Protect

Is there a way to exclude traffic on port 8080 from the VPN tunnel while connected to Global Protect?

I want to establish direct communication exclusively over port 8080, separate from VPN traffic.

Is it possible? If so, please tell me how to set

Get the info "Users login in Azure domain" to use in policy by groups

We are migrating onpremise AD to AZUREAD. The doubt is that these users going to AzureAD and all the info (source name and group belong) can not be retrieved by the FW (as UIA did on premise mode). So how can get the info (users/groups) from AzureAD

"source user" empty in monitor log

I'm looking at an old version 7 PA3000 which uses a user-id agent to map users (active directory) to IP addresses.

When i log onto the firewall CLI  a "show user ip-user-mapping-mp all" command returns what looks to be a valid list of user mappings. 

HTTPS response page

Dears,

I have created one custom response page(including image) that is for application block and URL block.

example:- If someone wants to access a restricted URL or application the page should be displayed on the customer screen.

I can see, once I ap