Prisma Access with CIE

Hi All,

Need your assistance. The problem is that test rule with user group doesn't have any hits. The users generating traffic are definitely part of the group.

Setup:

Prisma Access managed from On-prem Panorama.

CIE with AD sync. Users and groups

PAN-OS 10.2.11 Device -> Setup page missing

Hello!

I just upgraded my PA-220 to PAN-OS 10.2.11 and the Device -> Setup page is missing. (See attached photo). Has anyone else run into this or is it a browser setting on my PC?

request sc3 reset API

Does anyone have the XML API syntax for the "request sc3 reset" commands on the local firewall.   

1. request sc3 reset 
2. debug software restart process management-server

If not I guess i will gather it with the debug cli on.  But was hoping someone c

multiple virtual routers - routing between rfouters

Greetings,

I have a network with 30 PA-440 using the native SD-WAN plugin and currently I'm using a single virtual router for all sites using SDWAN and also off to my ISP's (1 using static route, 2 using my private ASN).

I am migrating to a public ASN

🚀 Join us at Palo Alto Networks Headquarters for Ignite - November 14, 2024 🚀

Enterprises are embracing AI to revolutionize their operations, but with innovation comes new cybersecurity challenges. That’s why you can’t miss Ignite on Tour!

This event is your gateway to exploring how AI is transforming cyber defenses. Join us

Best Practices for Configuring ARC GPUs in a Palo Alto Networks Environment

Hi everyone,

I’m exploring the integration of ARC GPU with our Palo Alto Networks environment and would appreciate some guidance on the best practices for configuration. Specifically, I’m interested in optimizing performance and ensuring compatibil

Enquiry on Password Expiry and Change Period

Description:

I have queries on Password profile This has to do with the settings “Required Password Change Period (days)”. We created a password profile to test this setting and to avoid affecting the rest of the users. We set this setting to 3 (da

Doubt configuration HA Paloalto-Aruba

Hello to all

I have a pair of FW PA-460 active-passive. When we perform Failover I lose 40 seconds the network to the internet. i have only HA1 connected on a pair of SW aruba. I suspect it may be an Aruba or Paloalto configuration issue. Any idea?

B

Non Functional data plane due to this firewall rebooted

Hello Friends,

One of our customer is facing an issue with the data plane which is getting rebooted due to non functional data plane

I analyse TSF and found below two error

1) Backtrace execution for the restarted process stopped due to an error ac

BGP Peering Issue

Hi All,

I have an issue with maintening a BGP Establish connection. Essentially the setup is the Palo Alto to two peers to allow for resilience if one BGP peer fails. If one peer is established it stays stable. If I enable the path to the second peer

Duo SSO With GlobalProtect Client Connection Not Getting Established

I’m encountering an issue with our GlobalProtect VPN setup, which uses LDAP for user authentication and DUO SSO for multi-factor authentication (MFA). The process works as follows:
1. Users launch the GlobalProtect application.
2. They are prompted to

AWS NGFW currently at 9.18 and need to upgrade to 11.0.3-h5

Greetings, 

What I would to try is creating an new instance for the firewall on 11.0.3-h5 or whatever is available in AWS.   then import my 9.1.18 configuration.  Or would it be better to import device-state?  or should I just follow the normal upgra

Shared Content Preview

Working on a 1410 and while everything appears to be working correctly, I noticed if I export the configuration in cli in set format, I have a number of lines that start with:

set shared content-preview application

The firewall has never been man

Identifying Preferred/Recommended PAN-OS Versions

I recently upgraded 2 locations of 3420s and 3410s to 10.2.10h4 from 10.2.7h8 and it looks like Palo Alto has included a feature that will identify the "preferred" software versions.

This is a pretty neat feature native in the GUI which will hel

couldn't able to renew the self-signed certificate in palo alto firewall

Hi Guys

I'm facing issue while renewing the certificate in palo alto firewall (PA3220 Version 10.1.6-h6) its giving me error is file to write issuer certificate components to disk.

I have check the disk space sh system disk-space

show system disk-space