I am planning to setup the LAB environment where I want to run Palo Alto firewall. I am looking for latest version image. How can I get the image? Also need help on steps to achieve it. Thanks!
I have a strange intermittent problem with DHCP relay. I have it setup on all our firewalls, PA-220, and they relay to servers in the data center (Windows 2016). At some point the relay stops sending offers. I can see the discovery packet and no offer after. The firewalls connect to a Cisco 2960 switch, nothing crazy on the config. It works...
as doc descibe , Cloud connection should be connected [email protected]> show ctd-agent status security-client Security Client Dlp(0)Current cloud server: dlp.hawkeye.services-edge.paloaltonetworks.com:443Cloud connection: disconnectedConfig:Number of gRPC connections: 1, Number of workers: 5Debug level: 2, Insecure connection: fa...
So I've added a 2048 GB disk: admin@panorama> show system disk details Name : vdbState : PresentSize : 2097152 MB Status : AvailableReason : Admin enabled When trying to switch system mode, this happens: admin@panorama> request system system-mode panorama Server error : Failed to change system mode from management-only to panorama.Plea...
Hello team Currently, I have a pair of FW 1410 Version: 11.0.4-h2, passive active and I have encountered the following problem When creating new local users, with permissions, superuser I can not access via SSH to them locally but I can do it via GUI and all other users created previously.i.e. Users created some time ago in the FW are working co...
We have seen that whenever a domain password is going to expire for the SSL VPN user, the Global Protect client on the user's system starts flashing a message that the password will expire soon. We want to know if there is any possibility to embed a password reset link as well along with such a message.Please help us on the same so that we conv...
Hi there, I had setup Log forwarding profile, where I am sending All logs to syslog server. Thats working great. Then I added one more line where I am filtering threat logs for (severity eq critical) and (zone.src eq internet_zone) Checking filter results by Filter Builder and its showing exact values which I am looking for Then I add...
Hello, We have set up some nested device groups, to allow for easier policy management and, as expected, when viewing traffic in Panorama we see the logs for both device groups in the parent device group and only child device group logs in the child device group. I was wondering if there was a way to only show the parent logs in it's own DG?
Hi everyone! I am kind of bummed on why my syslog configuration is not taking effect. I have 2 pairs of firewall, PRD(2 firewalls) and DR(2 firewalls). Both are in HA setup and managed by Panorama. My syslog configuration in DR and PRD are just the same. Same server, same settings. For some reason, the syslog in my PRD is not working. So my...
Any tips/advice how to test multicast? Should I be able to do a ping from a firewall interface included in the Interface Group to a multicast address as a test? Also from Runtime Stats on the VR, I do not see anything showing under the Multicast -> IGMP -> Multicast - I thought I would, but maybe I am wrong thinking this
Does palo seriously not provide a way to roll back GlobalProtect? TAC told me there is no documentation on how to do that.
Hello Experts, I have been asked to provide a plan to upgrade Palo Alto firewalls within a year and I have almost 430 Palos in the environment. I need help creating a sample plan with timelines and what columns I should use in this plan. If someone has such a plan template kindly share.Hostname IP Location PANOS Prefered PANOS Schedule etc...
Hello all, I am working as a Security Engineer currently and I am learning and working on Palo Alto Networks. During exploring, I came across Palo Alto LiveCommunity and I see there is so much technical content here to browse and learn. I am looking forward to connect with members here and ask my questions and learn through it. thank you
Hello~ Does anyone know this failure message that we use Config Audit for compare configuration? Thanks! (PA-3020, v6.1.4) Failed to create config file!
Hi! Me again, I apologize. I am currently out of troubleshooting tricks. So here it is. I have configured my Source NAT, outbound-to-internet and default route. All are good. No issue. Traffic is hitting the correct Rule and NAT. The thing is, the webpages are very slow as they loads. Probably 2mins or more. Kind of frustrating and time-cons...
PavelK
on:
Throttling ingress bandwidth on a sub-interface
