1:1 NAT configuration

Hello,

I'm having issues with 1:1 NAT set up. Using a pair of PA-5220s in Active/Passive set up. I need to set up temporary access to some devices behind the firewall. I have a block of IPs I can use. Do I need to set an IP from that block on an inter

Industry category keep selecting "Financial Service Industry" in BPA report

I have tried to select another industry category before generate the report but the system keep using "Financial Service Industry" in my report instead of the category I choosed.

PAN Migrations from SRX

Hi All,

Does anyone migrated SRX (1400) to PAN NGFW (3200) recently. If you have any best practices, please share it here.

Connection of Palo-Alter HA A/P pair to pair of non stackable switch/router

Hello,
We faced a problem with reliable connection of Palo-Alto firewall HA A/P pair to not stackable pair of switches/routers (i.e. Cisco 6500, Huawei NE40E ) with static routing and FHRP.

To make this connection we used one VLAN-interface + 2 L2 inte

BPA Report showing incorrect recommendations

Has anyone seen the BPA reports showing incorrect recommendations for things to change?  Example being, "Log at Start of Session".  The report is telling me that multiple rules should have that disabled, but none of my rules use Log at session start.

Log Retention Policies and Best Practices

Hello.

I'm looking for suggestions for what to log out to ELK. I understand that this will be different for every environment and should be based on existing log retention policies etc. However, we have no such policies, and I am currently logging far

Logging question

Greetings, long time listener fist time caller.  

So this question has been brought up several times in my Organization and although I have never spent extensive time looking for a feature, it is always in the back of my mind when I am working on the

Bgp and asymmetric routing

Hi
We have bgp routing with default route.
We have 2 providers. 1 provider preferred
We wont asymmetric routing. How can we prevent asymmetric routing so incoming traffic from 1 provider going out by same provider?
best regards
jesper

TCP Half Closed Connection and Palo Alto Firewall

TCP Half-Close Session -

TCP is a unicast connection-oriented protocol. Before either end can send data to the other, a connection must be established between them. During connection establishment, several options can be exchanged between the two end