General Topics

Is there a way to stop or fully prevent Palo Alto emails?

At my company we no longer use Palo Alto devices. While we find PA hardware to be good, we have moved in a different direction for our firewalls. That being said, we want to stop all Palo Alto emails (definition updates, firmware updates, everything), I have added anything PA related to our email block list, however emails still continue to sl...

Resolved! Global Protect App/Gateway Login Banner

Is it possible to setup a login banner for the Global Protect App/Gateway? I'm implementing login banners for most of our services and I see that you can implement a login banner for the Global Protect Portal, but I did not see anything for the App/Gateway. I saw another user mention that you could setup a HIP notification with your login banner...

Resolved! Quick upgrade query

We have a customer FW Pair running on 10.1.13 (which was the previous preferred maintenance release). We are looking to upgrade these to 10.2.9-h1. The upgrade notes say download and install the latest preferred maintenance release, which would be 10.1.13-h1 We have previously upgraded other customer FWs from 10.1.13 to 10.2.9-h1, back whe...

PA-440 gpvpn client only getting 10Mbps

PA-440 gpvpn client only getting 10M we converted tunnel to ipsec. we use ipsec parameters AES-GCM we adjusted mtu to 1362 but still not getting speed above 10M

Certificates not showing under Devices Certificates or CLI

I am facing an issue where if I import a certificate it doesn´t appears in the Devices certificates trough GUI or listed in CLI but it appears to be used in the SSL/TLS Services profiles or in the XML. Anyone know why this happens? Regards

CVE lodash.js

Hi, Anyone can confirm if PAN OS affected with this CVE? Lodash.js 4.17.20CVE-2021-23337CVE-2020-28500

Authentication Time out - RADIUS

All of our PA 820 are unable to login with RADIUS, both SSH and the web UI will time out. I see the access accept from my NPS server when I debug the authd log, but it then says ===============AUTHD: start========================= ERROR: No such table: device DB. Because this is impacting my entire network, I fell this is something on the NPS....

PaloAlto 3200 and Kiwi cattools backup tools

How to steup paloalto configuration backup in Cattools software with schedular. Can someon provide step by step guide?

PaloAlo threat vault

When we search threat vault site. Threat detail not showhttps://threatvault.paloaltonetworks.com/

VM-300

Hi Team, May i know how will i know how much throughput will be handled by these VM firewalls. For example Firewall with vCPU 4 & RAM: 10GB & 60GB Volume. How will i know how much throughput it will handle? If i face performance issues how can i check that? Regards, Sanjay S

Is it possible to change the target email where my 2fa email goes to?

I have a sso.paloaltonetworks.com account that is associated with our who PA firewalls. The 2fa six digit code goes to an email address that only I have access to, but I want to change where the six digit code gets sent to, so it gets sent an email address that my entire team has access to. So, is it possible to change the target email address...

Screenshot 2024-08-09 at 12.59.41 PM.png

Resolved! Error 500 when attempting to login

Hello! When I attempt to login to the VPN, I face this error. Any idea on how to troubleshoot it?

Resolved! 2 ISP Setup

Hi Team, I have a requirement to setup 2 ISPs terminating directly on firewall. 1 as Active and the other as Standby. We will be using Static routing with higher metric value for the Secondary ISP. If Primary goes down then Secondary should still allow access. But i have a concern if i can create 2 NAT rules with same source and destination as I...

Resolved! PA220 so slow rebooting

Hi, We have a PA200 which takes a long time to reboot. its like 13 minutes. Is that normal for PA220 ?? any way to know why its taking this time?

Resolved! Howto delete sub-interace from cli

Hi,I`m trying to delete a sub-interface from CLI but cant seem to find the correct command, i managed to remove the IP address and tag but not the entire sub-interface.admin@PA-200# delete network interface ethernet ethernet1/4 layer3 units ethernet1/4.20 Server error : ethernet1/4.20 cannot be deleted because of references from:import -> net...

Discussions

Is there a way to stop or fully prevent Palo Alto emails?