Hi guys , i am used to be fortigate administrator , now switch to palo alto . Just wondering how to add 2 interface to hardware/software switch and tag all the vlan into the switch. Thanks alot
Configuring an area 0.0.0.0 on PAN firewall (10.2 and higher). 1. Does PAN attribute 0.0.0.0 to area 0? Is that the only way to define area 0? or other options? 2. Area IP range: in cisco world, the range command implies that all connected interfaces on the router, which fall within the range, get include as LSA's in the area and start commu...
Hi all, we are enforcing to our devices an always on company connection, without vpn our users cannot login to their windows desktop (no local password cache), so we have implemented "Connect Before Logon" + "Enforce GlobalProtect for Network Access" but we have problems with captive portals. Is the captive portal detection working also in the p...
how to uninstall installed content from pa 3440
1.Any PANOS Supoort any Device(ex:PA-410,PA-415 or PA-220 AND PA-200? 2.PA-220 support 11.0.0? 3.Palo Alto upgrade path and downgrade path are the same?
Is there any other way to configure Log forwarding profile in all 300+ security policies in single shot. currently there is no log forwarding profile in all 300+ policies. So below method is not applicable: Not through web interface but you can export config out.It is one single xml file. Device > Setup > Operations > Export configurat...
what will happen if i give ip for my interface eth1 and eth1.34 from the same network . will that cause any issue ??what will happen if configure a sub interface without vlan?? Can i really configure the ip like this if the interfaces belongs to different zone and they dont overlap the security rules??
I have a virtual Panorama running 11.0.3-h3 and I'm trying to deploy software to PA-450s. The only option I have is to reboot device after install. I don't see an option to upload the software only without an install and reboot. Is there supposed to be?
Hey Community! I have my PA5200 series attached to Cisco ACI switches and it seems that some of the LLDP TLV options that the Cisco switches advertise - are either not understood/not supported on the Palo. Is there a way I can supress the log output from displaying in the monitor tab/dashboard as it just fills the dashboard all the time: This is...
Hi All, Where can I find information on Palo Alto hosted events in 2025? Doesnt seem much is going on. Thank you.
Anyone know if there is palo alto home version? thanks
Dear all, Apologies for opening so many community cases. but hoping someone could put me in the correct direction. I need to access my CSP, I come across the following warning message. Unauthorized Access Your membership has expired or has not been approved, please contact Palo Alto Networks Support. I need this access as I progress with f...
Hello everyone, I'm currently conducting a survey on the various possibilities that could lead to the "Connection Lost" issue in the environment. I encourage all of you to participate in this survey. Additionally, I have a question: In the event that an endpoint loses connection and is subsequently removed from the Cortex Administrator console, ...
I use GlobalProtect to connect to my employer's network from my home Wifi. However, the GP authentication requires port 8443, and this is not compatible with maintaining the highest security firewall settings on my Xfinity Gateway. Every time I connect, therefore, I have to change the Gateway firewall to a lower security setting. For pe...
I have a FW1_template-stack and FW1_template. I know the template-stack has its own config separate from a template FW. Is there away to audit compare both ? I am trying to move all config to FW1_template and leave template-stack as plain vanilla Thanks
Raido_Rattameis
reaper
on:
VPN with two subnets
TomYoung
on:
Device Security license
reaper
on:
No proposal chosen ikev1
