General Topics

Panorama location best practice

I have deployed Panorama in our LAN and plan to manage a global install. Now I realized that remote firewalls cannot reach it until they have their VPN setup (which I prefer to do using Panorama too).

What is the best practice to solve this? Should P

Download fails at 35mins mark

I am trying to download an ISO from microsoft site. It is around 5.2gb file and it has failed few times now around 4.7gb/35mins mark. Logs shows access allowed. using PA200 7.0.9.

How to Add custom file extensions in PA file extension list?

Hello,

         As we are implemeting Paloalto NGFW 3020 in our organization and now we facing a problem. We are implemeting security profiles and we want to add some file extensions which is not listed in PA file extension list. How could we add the

GP certificate differences in 2.3 and 3.1

Hi,

We have an internal CA, we have a certificate generated and it is used for GP portal/gateway only, clients are authenticating via usual credentials. Nothing fancy overall. So there are external clients who do not have CA cert installed, so they a

Interface traffic utilization report for multiple VSYS device

Hi all

So I'm trying to generate a very simple report on the interfaces showing what the max, min and Avg interface utilization was for the PAN device.

So I have two interfaces inbound and outbound, they have multiple subinterfaces created and config

Recommended MineMeld System Requirements

What are the typical system specs folks are using for their production MineMeld instances?  Are there any minimum system requirements documented anywhere?  Thanks for the help!

Removing interfaces off a VM-series HA pair

As per title, functionally, this is easy to do.

1. Shut VM down.

2. Remove interfaces from virt solution configuration for the VM

3. Power up. 

4. All is well.

But, in a PAN VM-series HA pair... I'm worried that I might have to shut both down AT THE SAME

Import from xml of a 2 vsys system

I have an xml config export from a PoC system that had 2 vsys configured. Is there a way to peel out one of the vsys configurations from the xml and import vsys1 only?

url-filtering

Hi,

In url filtering adult-and-pornography blocked . But la-xxx.com can accesible
xxx.com not blocked

1)
test url la-xxx.com

la-xxx.com adult-and-pornography (Dynamic db)

2)
test url xxx.com

xxx.com adult-and-pornography (Base db)

other info
----------

show ur

Two L3 interfaces on One Zone

 Hi,

in the setup of the above diagram , I need to run OSPF on Paloalto between two Core-SWs, so I have to create two L3 interfaces  Point to Point with the two SWs.

the two core-SW is considered as inside for me , so from the prespective of routi