Zone protection for VM series

Hi everyone,

I was looking for PA best practices for  VM series' zone protection but only found documents that talked about physical PA.

1. Are physical and VM series zone protection the same? could you point me where the docs for these are?

2. U

Wild Fire internet access physical setup

Physical Appliance require a direct internet access or dirty link ? 

PAN 3020 software is not in the list

I'm trying to download the PAN-OS 3020 software from the support portal but cant find in the list  and Panorama M-100 as well . Please anyone help why it so ? 

Logging of allowed URL attempts without allowing other traffic

Here is a simple example on what I am basically trying to do. 

We have two rules that allow access to certain domains. 

Rule 1 : Allow access to domainX.com 

Source: LAN
Destination: IP-Group

Security Profile: URL Filtering (Base-URL-Filtering-Profi

SSL decryption and AppID

Today we use "ssl" AppID in firewall rules. In case we would enable SSL decryption, is it needed to add the AppIDs of the decrypted traffic to the firewall rules, e.g. web-browsing, java, flash, or is the AppID staying "ssl" even when traffic is decr

10.0.4.vm.eval shutting down - vmware workstation

Anyone had luck running 10.0.4 vm eval on vmware workstation?

It shuts down right after initial startup, before I get a chance to login in console.

There's more than enough CPU/RAM/Storage. Network Adapters are configured properly.

10.0.0 vm works fi

PA-850 swap memory is 100%

Hi Team,

We have a PA-850 firewall and the swap memory showing 100% utilized. 

Can someone help me to resolve this issue.

PanOS 11.0.1 DHCPv6 issues after reboot

Hi everyone,

I configured a PA440 as a DHCPv6 Client and a Fritzbox 3390 as the DHCPv6 Server (with IA_PD & IA_NA).

I also configured an inherited interface.

The configuration is the same as here: https://docs.paloaltonetworks.com/pan-os/11-0/pan-o

Application Catagory is not working

Hi Team, 

We are facing issue with the firewall policy is not working,

we have a backup server(Acronics) that we neeet to allow communicaion between agent and server

we have create a access policy for the communication but once we remove the co

Customer portal login Issue

Geeting message "Your membership has expired or has not been approved, please contact Palo Alto Networks Support." while trying to raise Case in palo alto network portal.

GlobalProtect error message mfc120.dll is missing during upgrade

We have recently rolled out GlobalProtect version 3.1.1 and have started to see the following error message on some users machines during the upgrade: "The program can't start because mfc120.dll is missing from your computer. Try reinstalling the pro

Symmetric return with ECMP not working

Hi All,

We have dual ISP setup, and to load-balance the traffic we are using ECMP with static routes, and it works fine for the internet bound connections and traffic gets load-balanced.

We however face issues with connection to our VPN servers in th

Failed to fetch device certificate. OTP is not valid

Hello.

So, Failed to fetch device certificate. OTP is not valid issue.

Secondary NTP Server : pool.net.org

mgmt interface mtu : 1500 (default)

I have changed the mtu value, but the same phenomenon is happening.