PA 445 ZTP

Hi Team,

I am planning to configure the new firewall using ZTP and also planning to manage this firewall completely via SCM.

Add a ZTP Firewall to Strata Cloud Manager

Following the above link to add teh ZTP FW to SCM.

> Need to know where will i get

Fetch Device Certificate failure

Hello,

I am getting this error (Failed to fetch device certificate.TPM public key match failed.) on a PA460 (11.0.2-h2).

I tried multiple solutions without success :

• This KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000

Issue displaying globalprotect window with certain monitor configurations under linux

There seems to be an issue displaying the globalprotect window in Linux with certain monitor configurations. I have a small primary monitor and a large secondary monitor, placed like this:

The globalprotect window tries to display in the bottom right

Issue to send security policy forwarding log by email

Hello everyone,

I have created a security policy that logs only IPv6 traffic, and I added a log forwarding profile to ensure I receive an email whenever the policy is triggered.

However, the issue is that when I send IPv6 packets, I don’t receive a

PA-220 with multiple switch connections with same vlan

Hello,

I have a setup like this to provide some redundancy to a PA-220 firewall but have some questions about how to best configure.

What I have tried doing is setting PA-220 Port 1 and 2 to be Layer 2 with a common VLAN vlan.200 with the IP as sh

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

I have 8 anti-spyware profiles across about 10 HA Pairs - 2 predefined and 6 custom.  All in "Shared", not a DG.  Any references that would be able to be in a template are likely in a

NAT Question

I have a question about the PA NATing. I have 8 different internal zones within my test lab. 

Each zone is either assigned to a physical interface or a sub-interface. Would I need a separate NAT rule for each zone to be routed to my egress port (WAN)

pdf rule export to include APPs seen on each rule

Is there a way I can get a list of all the apps seen against each rule? There is a column "apps seen" that tells you the number of apps seen, but you have to click into that to look at what they are.

Change Text GP app Disconnect event

Hi,

I would like to change the text for this GP Agent error in this notification:

Where the GP agent obtains this text? how can i change it?

Traffic on udp/3478 (STUN) is been classified as 'unknown-udp' for MS-Teams app

Hello,

Most of our users are running Teams in a Office 365 on Windows laptops, from a network perspective it is just a connection on different ports to random hosts within 52.0.0.0/8 subnet. 

The problem we have is with udp/3478 port, some portio

PA equivalent of ASA packet tracer?

One of the more useful features in troubleshooting on the PIX/ASA (which we used until recently) is the packet tracer, which allows us to enter source/destination IP/port, etc and check to see if a given connection is allowed or blocked, and by which

TLS handshake error when using my IPsec tunnel

I have an IPsec tunnel set up between two PAs. Everything showing green and I can ping between the two networks. My problem is that whenever I try to access a Docker container over TLS through the tunnel I receive a TLS handshake error, connection re