I'm trying to assign the new authorization codes on these firewalls but we are receiving a failed message from the Firewalls and an error message from the Palo Alto Support site.
Trying to really understand the difference here. I have never made a Layer 3 VLAN interface using the VLAN tab on "interfaces". When I make a layer 3 interface I use Ethernet Layer 3 interface that connects downstream to a switch. From what I can tell Layer 3 VLAN interface is a scenario for when you have physical clients connected to the fire...
Hi everyone! First, sorry 'cause my English is not good. My issue don't let me sleep. My firewall (PA-3410 v11.0.0-h1) doesn't process traffic, I can't do ping at other interface than MGMT. The Monitor is clear!. The only thing I have observed is that the traffic reaches the MAC interface, but the CPU counter does not increase. After a few min...
Can we configure a VPN gateway for cisco anyconnect via Paloalto FW ?
We use RSA's MFA Agent for Windows authentication. When we install or update GlobalProtect, it disables the MFA Agent at Windows login until we connect at least once via the VPN. It appears it is adding itself as an authentication provider into the Windows Login UI and I suspect it is related to these registry entries below. Has anyone found ...
Hi All, i have some doubts .... 1.i have three zone TRUST,DMZ,UNTRUST. 2.there is a nat policy from TRUST zone, DMZ zone to untrust 3.all interface is under same VR .and there i haven't add any static route yet. instead i create a PBF rule from both TRUST AND DMZ to UNTRUST (destination interface=untrust interface, next-hop untrust pc) 4.Secur...
I want to use two Virtual Router VRF router-28 and VRF router-128 WRF-Router-28 for wan, inside DMz Second-Router-128 WAN, INSIDE and DMZ Separation port connection for two set of DMZ, WAN and inside this all allow for PA-440? I'm trying to use as two virtual firewall to one physcial it's don't speed throughout wan connect is very slwo
Hey, I wonder if the "Show arp all" command doenst show the IP - MAC pairs if they are not matching the IP range of the VLAN (which is defined by subinterface) ? Like on the ethernet1/2.50 (which range is 10.66.50.1/24) i wont see the 10.66.51.X IP?
Good Evening, I'm having problem installa dynamic updates (PA3020 sw ver 9.1.18) Application and Threats. Everytime I tried to install manually or authomatically I receive this error in system log Failed to upgrade Content package to version <unknown version> Content package downloaded but installation could not be scheduled' Antivirus Upd...
Hello! I am configuring an ha cluster Fw 440.Firmware 10.1.3 When i push "commit" i lost gui access. I can ping andaccessvia ssh to fw. I recover the gui access via cli:request restart system. I have updatefirmware to 10.1.11-h5 but i happen the same or something worst! main fw never gotaccessvia gui Bakcup fw happen the same than before ...
Hi, we've received our PA-445 but cannot create a Customer Support Portal account for it. After entering the serial number and sales order number I receive the following error: Unable to create user account, request matches multiple Support Accounts. Anyideas, please? Thanks, Nick
Please find the exsisting set-up: Juniper switch---ospf--->Palo-Alto firewall------------tunnel-----> External 3rd party Cisco Router We are planning to change the Juniper switch to Cisco switch and make the configuration as below: Cisco switch---ospf--->Palo-Alto firewall------------tunnel-----> External 3rd party Cisco Router B...
I"m looking for a full lab access and I can't find for Palo alot
Hi team, I got a question , after upgrading Panorama to 10.2.7-h3 the logs stopped to be reflected on. (PA-410 to Panorama) ( from PA-3250 to Panorma is working properly). So , I proceed doing the following : 1. We proceeded with the workaround provided by https://live.paloaltonetworks.com/t5/general-topics/pa410-version-10-2-7-h3-does-not-...
Hi all, I've created a tool, that you might find helpful. It can be tedious to search for specific bugs, or when a bug have been addressed. This tool gathers all known and addressed issues from all (not EoL) releases and makes it easier to filter through. Currently only supports PAN-OS. Bear in mind, that it's a work in progress. I would...
reaper
on:
PAN-OS 12.1.X Firewalls & Panorama Managed
