require password change on first login on HA mode

Hi Guys

I have question for "require password change on first login" on HA mode.

firstly when I enable this function at any Palo Alto unit of HA mode and edit or create admin role account,

then try login to one of HA unit, the login page display passwo

Global protect port

Can i change global protect port 443 to another port as my another application using same port and this application nating with same public ip

Add URL for SSL Decryption from Panorama for multiples device

Hello ,

I need add several URLs for SSL Decryption  for multiples device and I wanted do it from Panorama to avoid having to access the firewall one by one,

Any idea? Can I create any template or similar only for it?

Regards

dyndns configuration with palo alto 850

I am migrating services from Fortinet to Palo alto, On the existing Fortinet they have ipsec vpn using FQDN on both peers, can the same will work with Palo alto,

Because i have seen few PA document, which says if both end peers configured with FQDN, t

Upgrade peer to respective version

Current my PAN OS running on 9.0 and plan to upgrade to 10.1 , understand the upgrade path as below

9.0.X -> 9.1.0 >  10.0.0 > 10.1.0 > 10.1.x

Can I upgrade my passive peer to final version 10.1.x accordingly upgrade path then follow by upgrade my acti

Failed to renew device certificate. Failed to send request to CSP server.

We have error log pa which version is 8.1

And we following the KB, no error log again.

However, the paorama show still failed...

How log can auto check the cert status?

Can us manually check? restart management plane in panorama?

In version 9.1 before, w

PA 3250 HA Pair bgp peering

Hi

I am looking for a design/ best practice recommendation for the following topology (See cover photo)

I am looking at implementing BGP between the swtiches (Nexus 9Ks) and the firewalls (PA 3250's) Firewalls are in a HA pair. Switches use VPC's as

Panorama 9.1.10 can push config to PA-5020/5050 version 7.1.12?

1. Panorama  from legacy mode version 8.1.14-h2 to panorama mode 9.1.10 can push config to PA-5020/5050 version 7.1.12?

2. I created my VM panorama. it was going to pending loop:

Warning: This Panorama instance does not have a license key. Click 'OK' b

Zone Heat Map Showing 0% DNS Sinkhole Adoption Between Two Zones

Every single security policy is using the same anti-virus and anti-spyware profile, but the zone heat map is showing 0% DNS Sinkhole adoption for some rules.

There are three Source/Destination Zone pairs where it is showing 0% URL Filtering (because

Groups and SuperGroups

I work for a global enterprise that has around a dozen PA 7000 series FWs running between 2 & 6 vSystems each. We have many address groups with more than 500 members, and several "SuperGroups," containing two, or more, of those large groups.

Let's sa

Looking to upgrade Panorama and firewalls from 9.1.5 to 10.0.6

Hi all,

Apologies if this is in the wrong location, I'm new to PA and the community.

I'm looking to upgrade Panorama and the associated firewalls it's managing from 9.1.5 to 10.0.6.

From what I've gathered, we'll need to follow the recommended upgrad

Is possible to get 100% Zone Protection Adoption?

Hi All,

I have set all my zones with zone protection but after running BPA the zone protection adoption result is 90%, i have tested same on other firewall and get 97%, what i'm missing, Is it possible to get 100%?

Online manual says: (https://docs.p

Adoption rate for DNS security showing 0% in BPA tool

Panorama is on 10.0.5 and firewall is on 9.1.7. Yesterday we have performed BPA for firewall , adoption rate is showing 0% for DNS security.
We have upgraded panorama to 10.0.5 after 12th May , before that adoption rate for same was 100%.
we want to co