Resolved! Virtual System Migration and clustering

I cam across a scenario where we need to migrate a virtual system from a PA device to another . devices are the same model . Is there any suggestions ? what is the best approach to this ?

Also , if a PA device is running virtual systems how we can add

Resolved! Issue with my Palo Alto Lab

Hello folks

I have a strange issue in my lab , here is the scenario :

VM-100 on ESXi
PAN OS 7.0.5
Inside interface connected to internal zone (10.0.1.0/24 network)
outside interface connected to my home firewall ( 192.168.1.0/24 network)

Interfaces have

Resolved! How to tell which Objects & Rules are being used.

I want to find a way to tell which address and services objects are not applied to a NAT or security rule and which NAT and security rules are not getting used?

Any Ideas on how to get this information?

Thanks

Bane

Resolved! .yml file: PA device password in clear text

Hi Luigi,

.yml file for DagPush node in /opt/minemeld/local/config shows password of the device in clear text. It should be at least hashed.

Thanks

Regards,

Bertrand

Resolved! VMware ESXi 6.0 and PA VMs

Is VMware ESXi with vSphere 6.0 supported?

The technical documentation for the 6.1 virtual appliances states: "VMware ESXi with vSphere 5.0, 5.1, and 5.5 for VM-Series running PAN-OS 6.1."

And the 7.0 documentation states: "VMware ESXi with vSphere 5.1

Resolved! NAT and Security Policies, PBF Failover and Symmetric Return - Dual ISP

This is two parts:

1) I configured Destination NAT rules and corresponding Security Policies to allow inbound access to servers on private LAN.  These all utilize the Primary ISP public IP address.  If I want these internal servers accessible over the

Resolved! OSPF pocket in an EIGRP network

I am putting a PA firewall in our datacenter and am looking to have the firewall advertise the protected subnets out to the rest of the network.  However, the rest of the network uses EIGRP, so the datacenter switch and the PA firewall will need to b

Resolved! Policies >> Security

Unsure quite how to phrase my question. Under Policies >> Security:

I have a Rule way at the top for McAfee ePO; tcp; port 8443.

Settings that I have set are:

 Source Zone: Trust     Source: IP address for a specific internal host 

 Destination Zone: Un

Resolved! PAN response to: Attacking Next-Generation Firewalls: Breaking PAN-OS ?

So are there any response available from PAN regarding the topic which you can read below?

Like when are updates scheduled to be released, any mitigations you can perform before updates are available etc?

Or are they already disclosed (and fixed)