General Topics

Stateful Session rely on interface or Zone

Hi There,

  Currently, I'm testing redundancy for vWire pair. I have replicated the existing vWire and sub-interface configuration to another couple of interfaces. Now both the vWire pairs have identical configurations including the zone. I anticipat

Feature suggestion: better candidate configuration highlighting and testing

These are some suggestions that would help a lot when creating new rules:

1. Highlight modified uncommited policies.

You may argue that a user should know what the is chaning, but the problem is multiuser.

When a user has a candidate rule, but ha

Does the NGFW support ADCS?

Just wonder if there's a way to set up ADCS to work along with OCSP.

Rule to be notified when users connect to wifi

Hi guys. Does anyone know how to set a rule to be notified when new users join the network?

URL Filtering

Good day

I am sure this question is answered somewhere but I somehow cannot locate it, so please be patient as I go through the problem we experience.

Our company's US URL is listed as High-Risk when testing it through the URL Filtering website even th

Restoring Palo Alto from AWS snapshot - interfaces etc

Apologies if this is a basic question but first time I do this maybe in a real production environment and I have no prior experience. Does anyone have an example of restoring Palo Alto in AWS (from a snapshot)? Where could things go wrong in the rest

NAT traffic from DMZ to another zone

Hallo Everyone,

I am using PA-220

let’s call PaloAlto-Firewall “X”

Office Firewall “Y”

Other firewall “Z”

Firewall X has 8 Interfaces.

Interface 1/1: has the IP-Addressee 192.168.5.254. we assigned this Interface to a Zone Called "DMZ". When this fir

URL category block triggers not logging in Panorama

Hi,

I am testing global protect using Prisma Access - Panorama managed..

On panoroma - i have a mobile user security rule applied with a custom URL filtering profile enabled where I have set the action to block for some of the newer URL categories in

pan-os-python Panorama set_ha_peers() method not working

The document I'm referring to - https://pan-os-python.readthedocs.io/en/latest/howto.html > High Availability Pairs

I've been working with the pan-os-python SDK, specifically with a Panorama High Availability (HA) pair. I'm following the documentat

How to Configure IPSec VPN Tunnel when a peer is behind a router without a static public IP

Environment
PaloAlto Next-Gen Firewall
IPSec VPN Tunnel
Topology
PA1 ----- Router ----- PA2

Public IP of PA1 : 10.50.50.50
Public IP of Router : Dynamic IP
Internal IP of Router : 10.20.20.1
Private IP of PA2 : 10.20.20.20

PA2 Private IP is natted by Rout

Shared policy last commit state

Hello -

How long does it take Panorama to update the "Shared policy last commit state" column?  I still see a "failed" even though it committed just fine.