Looking for a way to compare a Panorama template and a firewall running config

Hello,

I'm currently looking for an easy way to compare a Panorama template and a running config from a firewall.  Right now the only way I can accomplish this is if I export snapshots from both the Panorama and the firewall then get rid of what I do

Why would someone use "Next VR" for next hop?

When creating a static route on one virtual router. What would be an example of why you would choose "next vr"?

RDP with Gprotect time out

HI,

We are establishing RDP sessions through Globalprotect. These RDP sessions are closed, we went into this link: https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/globalprotect-features/rdp-connection-to-a-remote-client

We c

block keywords

Hello,

I need a advice. We need to block any keywords for our users. Could you edvice how to do it?

Thanks

What is the maximum character can filter text box can support in Palo Alto Panorama 7.1.6

Global Protect\MPLS redundancy

Currently I have an MPLS connection (Connected to a Palo Alto Firewall) at one of our branch offices in Shanghai. The problem is the MPLS connection (provided by Level3) goes down sometimes.

I'd like to setup a Global Satellite connection on the PAN

GlobalProtect and overlapping networks - is it a problem?

Hello


I'm using GP since few years without any problem. Recently my colleagues complains abut situation when he can't established RDP connection. Local networks in their home is 192.168.1.x and my servers are on the same network 192.168.1.x -
That's th

PAN-OS 7.1 - SSL Decryption Issues

I recently upgraded from PAN-OS 7.0.6 to 7.1.0 on a lab PA-200 appliance to start to test some of the features.  Right off the bat there seems to be an issue with SSL Decyrption.  As I stated in another post, I'm having issues with sites such as bank

Host name disappears

Running 7.0.6 on both panorama and firewall. Any reason why one device would all of a sudden lose its host name?

Wrong geo location for an IP

I have a set or rules that block access to some IP depending of their geo location. The problem is that an is is incorrectly geo located by the palo alto.

IP is 91.194.60.7, located in France, and Palo Alto locate it in Ukraine !!!

Is there a way to