Tunnel Monitoring

Hi Team,

I wanted to setup Tunnel Monitoring for the Dynamic IPSec tunnels. Peer end IPs are dynamic, we have around 5 to 6 VPNs that we need to monitor. I was going through the SK where it says for Tunnel monitoring, we need to have IP address confi

System Log Events

Does anyone know if there's a list of all the events that get logged to the firewall System Log?  If so, could you please point me to it?

The Administrators Guide refers to this list however, I cannot find it.

Kind regards,
Jeff

IPSec Phase 1 tunnel not connecting

Hello Everyone,

Need your support to fix a FW to FW PA IPSec Phase 1 tunnel not connecting.

I have checked the setting with the vendor and configuration is same at both the ends.

Below are the debug logs from PA

2023-11-30 14:30:40.000 +0400

Required PAN-OS 8.1.25-h1 for PA 3060

Hi,

As per the advisory https://live.paloaltonetworks.com/t5/customer-advisories/emergency-update-required-pan-os-root-and-default-certificate/ta-p/564672 customer need to upgrade the PA 3060 from version 8.1.15 to 8.1.25-h1 or greater but i'm unab

insufficient-content URL category

What is insufficient-content URL category and what is the recomended action for that.

PANOS 9.0 root partition fill in PA 3000 models

Hi Community,

We are able to upgrade to PANOS 9.0 from any maintenance version of 8.1. 

Once we install Base version 9.0.0 and maintenance version 9.0.X root partition is getting filled upto 93 to 95%.

Let say firewall is running in 9.0.6, If we want

Unable to HTTPS or SSH into new out of the box PA440

Had a new PA440 delivered to a remote location. I am able to ping the device (192.168.1.1) but am not able to HTTPS or SSH into it. Assuming that my IT person at the remote location has the device plugged into the MGT port and in the switch, which si

Best Practice Assessment Tool behind a license now?

I see the BPA has been moved to AIOps and needs a premium license? Is this correct?

vmware-carbon-black and App-ID

I've run into an issue with regard to deploying VMWare Carbon Black within my environment.  There are a subset of endpoints that have never connected to the Internet directly and use proxy allowances for Windows Updates, etc. I have requested that th

programmatically create address objects.

Hi,

Is there any way to programmatically create address objects, via API or something?

I have a list of approx. 50 subnet ranges for which I need to create corresponding address objects in the firewall, hence was thinking if there is a quick and ea

Data Filter

Hi,

I want to block all Microsoft files and pdf files data transfer through data filter, Could you please help me at 'file property' and 'property value' in file property data pattern 

Thanks

Dhananjay

Does PA put a bandwidth limit on unlicensed VMs that run on Vmware?

Does PA put a bandwidth limit on unlicensed VMs that   run on Vmware?

I see only 500kb per second on an  IPSEC tunnel between a hardware PA 200 and a PA VM

Enterprise License Agreement

Enterprise License Agreement, TP, DNS, PANDB URL, WF, GP, 3 year, Tier J

In Portal, I don't see the License limitation.

Re: How to Post a LIVEcommunity Discussion

Hello all,

I'm new her and with Paloalto firewalls.

anyone knows what is the default username and password PANOS vmware I use on GNS3 please.

see below.

Enter 'maint' for boot menu.
Booting PANOS (sysroot0) after 5 seconds...

Entry:
Booting 'PANOS (sysroo

Azure VM-Series licensing questions

I'm curious about how Azure's VM-Series licenses are authenticated.

As far as I know, VM-Series licenses are authenticated through CPUID and UUID, which have information in Azure.
We get this through the permissions of Azure Configuration settings.

Is