General Topics

Resolved! Cannot Change Application Risk Level in ACC

HELP! I'm running PA-200 ,10.1, virtual machine, Setting an applicaiton (FTP) risk level from 5 to 1 manually, and it showing up correctly in the application's open window details; however, it is still a level 5 risk application in ACC. I have committed my change, and even reboot my PA-200 i also tried to use CLI like this: set shared over...

PA 3430 is not detecting DAC cable

Hi, We have a lab with two PA3440 ina cluster. We are connecting the interface HA with a DAC cable. The Palo detects the SFP but not the cable. If we take these SFPs and DAC cables in a PA 5220 everything is being detected. So is there any incompatibility in DAC cables in model 3430??? is there any document to check what cables support PA3440?...

Resolved! Authorization Codes: Issued

I registered a device a few weeks ago, and I still haven't received the authorization codes. I don't remember it taking this long before. Does anyone have any ideas or know what the normal wait time is? Thanks, Sean

Join Us For a Fuel Workshop on Threat Protection Best Practices (APAC Region Aug 27-28)

RSVP for this event now! Fuel Workshop on Threat Protection Best Practices We are pleased to announce a new series of Fuel Workshops! Over the next two days, we will be going over several components of the NGFW and allowing the attendees to ask questions about the device. Please note the start times for these sessions are set around APAC t...

failed Factory reset and bootstrapping due to pan_oldlogs(PA-5220)

Do you guys have any idea? When I try to Factory reset and format panlog, it goes to first menu. and the maint says the reason I entered the maintenance mode is the failure of FSCK panlog. but it is impossible to do it. it force to go to entering menu like first menu. I tried to purge OS, and bootstrapping to another sysroot, and also Factory re...

Resolved! Passive firewall PA-7080 HA state: non-functional with state reason Necessary slots down: 6 7

Hi All, I have PA 7080 in HA mode . We got alert the passive firewall is state: non-functional with state reason Necessary slots down: 6 7 check the chassis , found at slot 7 LFC card status failure. my question is Can we configure exception for module “LFC failure” on HA failover scenario ? because i thinks it should be non-mandatory, si...

Resolved! ARP entries count per interface of DHCP binding.

Hello, I have now paloalto pa-1410 in my network and software panos:11.1.2-h3. I wanted to know how many arp entries "IP <--> mac address" can be stored in the firewall, because I cant see it listed here. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cli3CAC TIA

PAN OS Upgrade recomendation on latest 10.2.11 released 8/13/24 Currently Monitoring

Hi all, The PAN OS we used now is in 10.2.8. I have information from the link: https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-p/258304, and it said that the latest release 10.2.11 release on 13 Aug 2024 currently under monitoring (believ it is not "preferred" version yet). May I know is i...

PA VM Interfaces Not Appearing

Hello Community, I'm in the process of building a new PA VM. I've added the interfaces in ESXi and rebooted. However, the interfaces still don't appear when I issue the command show interface all, see images below. Can someone let me know what I'm doing wrong? Regards Carlton

Resolved! PAN-OS 10.2.5 is not working with EVE-NG

Hi Everyone, I received the PAN-OS 30-day trial version, I uploaded it successfully in Eve-ng, but it is not processed further after HDF Login, Please advise the solution if anyone is experiencing the same issue.

Commit Failed on Passive Paloalto-3250-admin-role -> AdminRole -> role -> device -> webui -> objects -> packet-broker-profile unexpected here

Hi , Please help , after installed dynamic update of antivirus on Active & Passive PaloAlto-3250, commited successfully on Active but not able to commit on passive.. after commit failed on passive try another way made appication & threat shaedule none in dynamic update but again commit failed, getting below messages. DetailsValidation E...

Resolved! Certification expiration alert

Is there a way to generate alerts for certificates which are about to expire? I mean, for certificates installed and used for example for GlobalProtect, SSL decrypt and etc...

Resolved! Send Emails with Gmail

Hello friends, I'm trying to setup my home firewall with the Gmail (or any other free SMTP server) but the test failed with both Gmail SMTP and SMTP relay. The firewall is able to ping and resolve the dns name of the SMTP server. Connection to: smtp.gmail.com:465 failed: Failure when receiving data from the peer Connection to: smtp....

PA USER-ID - WILL A 64BIT VERSION BE RELEASED?

It appears that there are newer version of the user-id application but looking at the install documents, the new versions are also 32 bit. Is there a time frame on when Palo will come out with a windows 64 bit version?

365 Encrypted Email Decryption Issues

In June, for some reason users receiving encrypted emails in Outlook could no longer access them. If they go to the Outlook web client it works fine and if we exclude their IP from encryption, it works fine. It is definitely related to decryption. We have tried excluding every URL that we can find Microsoft is using but have had no luck. There a...

Discussions

Resolved! Cannot Change Application Risk Level in ACC