This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

BGP Peering Issue

Hi All, I have an issue with maintening a BGP Establish connection. Essentially the setup is the Palo Alto to two peers to allow for resilience if one BGP peer fails. If one peer is established it stays stable. If I enable the path to the second peer and disable the path to the first peer it remains established and stable. When I enable both BGP...

a.jones by • L3 Networker
  • 19785 Views
  • 6 replies
  • 0 Likes

Shared Content Preview

Working on a 1410 and while everything appears to be working correctly, I noticed if I export the configuration in cli in set format, I have a number of lines that start with: set shared content-preview application The firewall has never been managed by Panorama so not sure why that is appearing as everything I've found suggests that is due ...

DJ_1924 by • L2 Linker
  • 2311 Views
  • 1 replies
  • 0 Likes

couldn't able to renew the self-signed certificate in palo alto firewall

Hi GuysI'm facing issue while renewing the certificate in palo alto firewall (PA3220 Version 10.1.6-h6) its giving me error is file to write issuer certificate components to disk.I have check the disk space sh system disk-space show system disk-space Filesystem Size Used Avail Use% Mounted on/dev/root 9.5G 3.6G 5.5G 40% /none 2.5G 68K 2.5G 1% /d...

Resolved! Changing zone name in 100 security policies?

Hello Experts I want to change the zone name. There are 100 security policies associated with that zone. How I can do it quickly, like is there any replace pattern command available (like in Juniper) to replace th zone name any where in configuration? Regards, GR

ghostrider by • L4 Transporter
  • 11972 Views
  • 10 replies
  • 0 Likes

Resolved! PA460 app summary no data to display

Hi all, PA460 Version 11.1.0-h2 i need some advise regarding the issue i am facing right now in monitor -> app scope --> Summary [Top 5 Bandwith Consuming Source (last 60 Minutes) ] Showing No Data to Display but the other column is displaying without any issue As per below reference link, we could see this issue may cause due to m...

72c04153-45dd-4593-b886-697ef0503f53.jpg

Secondry ISP not able to ping form external.

I have two ISP connected to my firewall. 1. ISP1 is in untrust zone and default route configured metric value is 10.2. ISP 2 is in WAN1 zone and default route metric value is 15.3. Both ISP are in same virtual router. I am facing one issue i cannot ping my ISP2 from external. My home public ip if i enter static route in the palo alto firewall i...

Resolved! Two Default gateways with different priority

Hi Guys, We have two isp links (ISP1 AND ISP2). We have defined to default gateways and set the ISP1 less priority so that all internal traffic will take ISP1. for example0.0.0.0/0 ethernet 1/1 next hop 76.45.146.22 admindistance 10 metric 10.0.0.0/0 ethernet 1/2 next hop 89.54.54.56 admindistance 10 metric 2 In this scenario. We have published ...

irshad.n by • L1 Bithead
  • 8504 Views
  • 5 replies
  • 1 Likes

PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

Hi guys, I was trying to upgrade PA440 on my lab but it was failed. (10.1.8 -> 10.2.7-h3) The following message was output. == Operation Download Status Completed Result Failed Details Successfully downloaded Preloading into software manager Traceback (most recent call last): File "/usr/local/bin/swminternal", line 18, in <module> s...

configure ha in different locations

hi, I have 2 palo alto and I have them in different buildings and I want to set up an HA between them how can I do it without just pulling a direct cable I want it to go through the network infrastructure. Kind regards

Tunnel Interface IP Address Requirement

Hi everyone! I am a new learner for Palo Alto I want my Remote Network to reach my HQ Network via GP. I am kind of confused whether when I am going to use IP Address to my tunnel interfaces, either on IPSEC site to site or Globalprotect deployment. Some of the video guides uses IP while others don't. I know that IP Address on tunnel i...

renzanjo11_2-1725618463451.png
renzanjo11_3-1725618463783.jpeg
renzanjo11_4-1725618463785.jpeg
renzanjo11_5-1725618463782.jpeg

FW specific rules from the Panorama shared policy

Hi All, Using Panorama (10.1.x) with a number of managed FWswe have a shared pre policy, parent pre policy and child policies with pre rules configured within. goal - in event of a security incident on a branch location we want to have a pre-defined deny rule in the parent pre-policy in place that we can just enable and push down to a specific F...

PA_nts by • L4 Transporter
  • 1022 Views
  • 1 replies
  • 0 Likes

Replacing the FW serial number in Panorama with a new one

Hi, What is a reliable way to replace the FW serial number in Panorama? We had a problem uploading a new license because the FW serial number did not match. Palo Alto TAC solved the problem, but the serial numbers changed, which caused the FW to be disconnected from Panorama. What should be done to swap the serial numbers so that all rules...

root partition available space reducing

I have a VM-500 ,PANOS-10.2.8-h3.root available space is decreasing and is now only 3%. I usually run below commands which sometimes can get me 1 or 2%. I have aggressive cleaning at 90% enabled. Why is creeping to 97% even with aggressive cleaning enabled.I have rebooted the fw(have seen reclaims some space after reboot) but didnt help. > d...

  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks