General Topics

Resolved! Pan-OS 6.0 Download fails on 5050

I have a PA-5050 and ran the "check now" for software. I am on version 5.0.10 and the only version I see for 6 is 6.0.1 (do not see 6.0.0)When I try to download this version I get the following error message:Details: Successfully downloaded Preloading into software manager The required 6.0 base image mist be loaded...

SUPPORTED/UNSUPPORTED SFP

Trying to find any documentation on supported SFPs for PA-4020. Having an interface issue and I am tryiing to determine if the "unsupported spf detected" error I am seeing is related.

Resolved! commit hangs on 98%

Hi,I had an antivirus download/install job that had "download in progress" for several days. I restarted device server and management server,after this the antivirus downloaded and installed.Now when I try to commit policy changes, status says 98% for several hours (+5).Any way I can troubleshoot this?CLI commands used:> debug software restar...

Resolved! Setting up user-id

I have the agent on a member server talking to my domain controllers. I can see in the agent logs and monitoring its collecting IP/usernameI can see the PA box as a connected device.I have the server the agent is running on setup under user identification > user-id agents on the PA box and that has a green bubble for connected.but when I look...

Resolved! Global Protect not passing last login information?

We have a few vendors who have AD accounts, but only connect to Global Protect to SSH to specific servers. They don't use any other domain resources. When we look in the domain controllers there is no last login information. So our policy to disable unused accounts after 21 days keeps disabling active accounts.Anyone know how to get it to pas...

Not able to access th URL

Hello Team,We are not able to access the below URL :tn3270e.amadeusprintservices.comAs per the website support team they have advised to enabled the below port to access the URL :TCP9876,443,80We have already allowed the web browsing traffic for the network . what to do for 9876 port.Please advise.

Resolved! Do I have a split - full tunnel issue

I'm a system admin, and have also become the Network guy. This is okay: it's a small network. I'm still learning.I have a PA-200, installed by a VAR, in a colocation rack. Rack is filled with windows and linux hosts. I need to alter the VPN so that when my users in the office connect from their laptops, they can see the systems (ssh, rdp, ht...

Resolved! Email not going out

What is the configuration needed for a PA-500 to allow emails to go out. We use exchange and a Cisco spam blocker using port 25. We are recieving emails fine but external emails are not being sent out.

Resolved! Problem connecting SSH

I have a vpn configured (PA<->PA) to manage my FWs. The problem is that when I open a ssh to the FW ip LAN (10.105.0.7), session ssh runs successfully and I can connect to the FW. But if I open ssh to the management ip 10.98.200.16 ssh remains frozen.Looking at the log monitor, when i try the LAN ip i can see how the PA recognise the Appli...

import config from PA-2020 to PA-3020

Hi,I need to change a old PA_2020 with a new PA-3020 and would like to use the configuration of old device in the new firewall to avoid to do the work again..So, Is it possible to import config file from a PA-2020 to a new PA-3020?If yes, is there any requirement (version or something)?, and it is enough doing Export Named Configuration Snapshot...

Es recomendable sustituir un Firewall Microsoft TMG por un equipo Palo Alto ?

Estoy pensando sustituir uno de mis firewalls actuales un Microsoft TMG por un nuevo equipo Palo Alto, en términos generales a nivel de funcionalidades de firewall estoy seguro que palo alto sera mejor y me dará mejor performance, pero tengo dudas sobre como migrar las publicaciones tanto de Exchange (OWA y Active Sync) como de Lync (Exclusivame...

PA-500 and memory upgrade

Recently I ordered and installed the memory upgrade for my PA-500. It was under $400, is a simple end user install and upgraded the management plane to 2gb (from 1gb).I will not give any estimates as to improvement as I do not want to exaggerate, however, I highly recommend anyone with a PA-500 spend the $400 (ish).Hope that helps,Bob

Custom Reports by Interface

Is it possible to get custom reports for traffic on a per interface basis? The only thing remotely close that I have found is under Traffic Reports I can see ingress interfaces and egress interfaces, but all that shows me is a daily total. What I'm looking for is to see these statistics on a more granular basis (by minute or hour) as a custom re...

Traffic denied by one context is allowed in the other

Hello All,I have a strange situation and need some help.I have 2 legs of my firewall implemented on Core and Edge level. I have a host 10.1.1.10 behind my Core layer firewall trying to access an external FTP server.On the core layer I have a policy to deny ftp traffic from inside to outside and the logs show the traffic is denied.But on the Edge...

Resolved! Application

I am trying to block some websites such as music.yahoo.com ,mylife.com Spaces.live.com and Talkgadget.com . But they aren't one of the listed choices and I am unable to add them to my blocked application list. How can I do that?

Discussions

Resolved! Pan-OS 6.0 Download fails on 5050