Config Backups Explained

Is a KB article out there that explains what each type of config export is and what is included? Looking through our Palo Altos I can see these 6 different config exports...

Named Configuration Snapshot

Candidate Configuration

Configuration Version

Devic

superreader Cannot Set CLI Parameters in Panorama

I recently upgraded Panorama to 6.1.1 from 5.0.11. When I did so, RANCID was no longer able to log into Panorama and do its configuration tracking.

I tracked down the problem to a superreader not being able to issue the "set cli pager off" command. Th

PDF Footer logo dimensions

The recommended PDF Footer dimensions are 182 x 154 per the GUI but when I put a logo in matching those exact dimensions, it compresses it vertically.  Are these recommendations wrong?  If so, what are the actual dimensions for the PDF Footer?

Thanks.

Panorama and single device policy

What is everyone doing to manage FW policies that only apply to a single device? My thought was to create device groups for those one off devices.

DNS attack? False positive: urussynonumsantonums.com

Hello,

I am new to this realm so please note if I ask alot of questions, you all have the answers.  I have a PA device that has been spitting out multiple, multiple, and multiple Threat notices for the above domain: urussynonumsantonums.com.

I have se

Panorama Templates best practice?

Currently we are moving our stand alone firewalls to Panorama. We build device groups to manage policies and objects.

Now we try to create Templates but we don't know exactly how to use them. We read the following article but it didn't really help: Pa

VM Panorama utilizes 100% CPU always

We had a panorama VM upgrade recently to 6.0.8 with 4 cores CPU and 16 G memory.The moment it boots up the management CPU is always close to 100%.

Any one ran in to this problem or any suggestion would be helpful.

Palo Alto Syslog severity level compare to Syslog Protocol RFC 5424

Hi guys,

Do you know how Palo Alto interpret the standard Syslog protocol severity;

RFC 5424 The Syslog Protocol

Numerical         Severity

0       Emergency: system is unusable

1       Alert: action must be taken immediately

2       Critical: critica

Deploying Panorama M-100 in HA mode

I have purchased two (2) Panorama devices M-100 to be setup in HA-mode.

A couple of questions:

     a) There are two interfaces in the front. One for Management, but what is the second one (the one to the right) used for?

     b) The devices are "activ

Can 'admin' account be deleted?

1) We have several PA-3020's running 6.0.1 in our organization with only a few admin user accounts which integrated with AD, so audit wants to know if we can delete the generic accounts like "admin" or "panorama"?   Any negative implications to doing

Panorama Save Devices

Is there anyway to save all devices from Panorama after a commit?  I'm currently changing contexts in Panorama to each individual device and saving them that way, kind of a pain.

Thanks!

Public Interface - two SSL VPNs and VPNS site-to-site is possible ?

I have one interface external configured with one public IP address and many VPN site-to-site with many customers on this interface and a VPN client for the corporate user. I wish configure new SSL VPN client-to-site for another customer in this same