Hi,Which one is best split tunnel or tunnel all , If tunnel all how to do in PA .What are the pros and cons Thanks
Hi Team, I dont see dedicated HA ports in PA 445 in the Datasheet nor in the front panel links.Does it mean any of the interface can be used for HA by just configuring the IP? Or is there anything specific we need to do here? Can we plug in direct cables between the firewalls using the existing ports? Answers are much appriciated. Regards, S...
Hello We ran into a sporadic issue (once per day) where the communication between the firewall and the router stops for ~30 seconds. A deeper analyze revealed that the firewall has no ARP entry of the router for a short time. Our ARP ttl is with standard values (1'800 seconds). Adding a static ARP entry fixes the issue, but this does not scale...
Hi All, Can anyone show me how to troubleshoot this alert? or this alert is false positive? SYSTEM ALERT : medium : Could not access threat vault as per logs is only show 1 time only Thank you
Hi, I found when I use Dynamic update and install install Application and Threats, I can't finish the update. There are some info on my screen. Does any one can tell me what's happy?Operation InstallStatus CompletedResult FailedDetails .latest-content.tar.gz has not been downloaded. Download and try again
Hi,When I check the version update on the PA-450 firewall I use, it does not show new versions. The version I am currently using is 11.1.3. When I check from the software section, it does not appear in the version I installed. Has anyone encountered a similar issue?
Hey dear colleagues!Our customer faced an issue when firewall starts to randomly reboot without any reason. We requested a TSF and in even analyses we found that customer had Split Brain and this two errors: dnsproxy restarted unexpectedly however no known issue was identified. Please open a case if further assistance is required. dnsproxy: re...
Greetings,I have a network with 30 PA-440 using the native SD-WAN plugin and currently I'm using a single virtual router for all sites using SDWAN and also off to my ISP's (1 using static route, 2 using my private ASN).I am migrating to a public ASN and route but will still have the majority of my network using a private ASN. My thoughts were t...
Description: I have queries on Password profile This has to do with the settings “Required Password Change Period (days)”. We created a password profile to test this setting and to avoid affecting the rest of the users. We set this setting to 3 (days). We then created a testuser and applied the password profile to this testuser and commit. Aft...
Hello Friends, One of our customer is facing an issue with the data plane which is getting rebooted due to non functional data plane I analyse TSF and found below two error 1) Backtrace execution for the restarted process stopped due to an error accessing memory. Possible memory corruption? 2) all_task_4 restarted unexpectedly however no known...
Hi All, I have an issue with maintening a BGP Establish connection. Essentially the setup is the Palo Alto to two peers to allow for resilience if one BGP peer fails. If one peer is established it stays stable. If I enable the path to the second peer and disable the path to the first peer it remains established and stable. When I enable both BGP...
Working on a 1410 and while everything appears to be working correctly, I noticed if I export the configuration in cli in set format, I have a number of lines that start with: set shared content-preview application The firewall has never been managed by Panorama so not sure why that is appearing as everything I've found suggests that is due ...
Hi GuysI'm facing issue while renewing the certificate in palo alto firewall (PA3220 Version 10.1.6-h6) its giving me error is file to write issuer certificate components to disk.I have check the disk space sh system disk-space show system disk-space Filesystem Size Used Avail Use% Mounted on/dev/root 9.5G 3.6G 5.5G 40% /none 2.5G 68K 2.5G 1% /d...
hi All, I want to check when each admin account logs into its own session via GUI and SSH.If either one login to a 2nd session then it will be denied. Is it achievable? I can't find any article from Palo Alto regards to this.
Hello Experts I want to change the zone name. There are 100 security policies associated with that zone. How I can do it quickly, like is there any replace pattern command available (like in Juniper) to replace th zone name any where in configuration? Regards, GR
| Subject | Likes |
|---|---|
| 7 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
