Internal & perimeter firewall topology: Different Link aggregation between a PaloAlto Perimeter and an Internal Firewall to Intermediate Switch

Looking to automate a monthly pull of the BPA results.

I've not found anything in the API documentation. I can request/poll/pull and get a tech support file.

I want to upload it and receive the report/summary package in return. Is there a way to accomplish this

without scripting the manual web interactions

Asking for Best Practice in Coxtex XDR Pro (for Endpoint and for TB)

Hello newbie in Palo Alto here, can you give me the list or any ideas for the best practice in Cortex XDR Pro for endpoint, and TB. I want to make documentation for this. Thank you in advance.

MGT GPVPN priority

What happens if an interface is configured with HTTPS MGT and GP VPN。Why is this happening

Have a PA-3250 firewall on version 10.0.1 What would be the most stable version to upgrade to?

NA

Need assistance for BGP session monitoring using SNMP

Could someone please assist with how to monitor the BGP session in pal alto using snmp , especially when it goes down/ up, through any snmp based monitoring tool.

Basically 

show routing protocol BGP summary , 

if the peer is down or  state changes f

VM-100 VM-SERIES FOR KVM on OpenStack

Dears, 

Kindly we need your Support we are Paining to implement new Firewall VM-100 VM-SERIES FOR KVM on OpenStack can you Please share the Datasheet and I will be Thankful if someone answer my question  

My Question is how many Security zones it sup

Migrate NAT policies from ASA to Palo Alto

Hello All, 

I am trying to migrate Cisco ASA NAT policies to Palo Alto. I realized the packet processing in ASA is different from Palo Alto. On Cisco ASA, I will have two different NAT statements for source and destination. The packet when hits the fi

IP Drop - Spoofing - Internal Zones Only?

     I am trying to understand why the PAN-OS documentation seems to suggest that when configuring and applying Zone Protection Profiles, for IP Spoofing protection (IP Drop-Spoofed IP address), that it should be enabled for 'Internal Zones Only' (se

How to Nat Site2 WebHosting when Webhosting is nat to Site1 Only

How can users at Site2 can access 10.140.2.4 passing Site1 vpn tunnels to client Webhosting without direct S2S VPN tunnel ? What type of Natting will be required ?

Whats the best way to do URL filtering? Security Policy Service/URL Category or Actions > Profile Setting > URL Filtering?

I'm trying to wrap my head around internet filtering.  Currently we use a Cisco Ironport WSA that uses WCCP between it and Cisco ASA5525X firewalls.  We ran the expedition project on the ASAs and have the config imported to Palo PA-3220s.  Since the

Zone Protection Best Practice Query

Dear Team,

I have enabled Zone Protection Profile for untrusted Network as below

"1. Packet Based Attack Protection / Spoofed IP address disabled. Passed - Packet Based Attack Protection / Strict Source Routing enabled.
Loose Source Routing enabled.
Mal