PANOS 7 on PA-2020 ?

Will it work ?

I don't mean like is it compatible.

I mean: Will it be manageable at all, seeing that version 6 is already a management nightmare ?

Is anyone on PA-2020/2050 on version 7 and what are the experiences ?

I see some changes that may be usef

Globalprotect still cant report missing patches on MAC OS?

The last version that didn't have this "known issue" was 2.2.0, based on release notes. Even the most recent release, 2.3.1, has bug id 77018 and wont report missing patches on the mac. Any idea when Palo will resolve this? It seems to severely limit

Device Capacity Planning

I am trying to get my head around device throughput maximums. As an example the 3020 is speced as such:

• 2 Gbps firewall throughput
  (App-ID enabled1)
• 1 Gbps threat prevention throughput
• 500 Mbps IPSec VPN throughput

Are these throughputs simultaneous? In o

Is it possible use two or more snmp communities in the same firewall with version 6.1.0?

Hi all

I`m not sure if it is possible use two or more communities in the same box, I tried in a lab but doesn´t works. I used snmp-setup in Device->sETUP->Operations but only can use one snmp string

Lync Federation Traffic

Hi Guys,

Recently we've configured Lync 2013 on our network.

What i've noticed on the PA external firewall is the Lync federation traffic from the internal lync clients to for example 'Skype clients' on the web or other organizations is classified on

PAN-DB URL Category List

Hi Everyone!  I'm being asked to provide a report of all of the applications, categories and URLs we are currently blocking.  Does anyone know how to obtain this?

Global Protect - User login from only one device at a time

Hello,

I have configured global protect and was able to connect successfully. But is there a way to restirct user login from only one device at a time?. Meaning if the user has a laptop and a smart phone , the user should connect either from the lapt

palo alto networks configuration

hello,

I configured a PA-500 with routing mode in our company . I set the zone , the security rules , the nat rules . I allow all traffic from trust zone to untrust zone. But the problem there is no internet connection. We use a DNS server , that is

SSL decryption inconsistency

Hi,

I have enabled decryption on a small group for testing purposes. I have a simpel 2 rule setup, first exluding financial, health and custom white listed and then decrypt everything else.

I have a hard time finding out why the same site in the same

How can I add multiple IP Ranges to one Address Object

I need to create one Address Group, ExchangeCloudIPs-Grp, with many IP ranges.  I have PA-500, How do I accomplish this v 7.01.  What is the easisest way to accomplish this so I can go back later and add remove IP ranges?