Resolved! dual ISPs ECMP and virtual routes

if i have 2 isps, same bandwidth, used for load balancing with ECMP do i need 1 or 2 virtual routers?

Resolved! HOW TO CONFIGURE .1q - VLAN TRUNK

     Hi guys ,

I have a lots of doubts about how to configure .1q vlan TAG / TRUNK on PALO ALTO FIREWALL.

It`s possible to work with layer 3 interface ?
I don`t found any documents here.

Does anyone have something to help me.

Nbest Regards

THiago LIma.

Resolved! Disable weak cipher suites for SSL/TLS and SSH

Hi Team,

I want to Disable weak cipher suites for SSL/TLS and SSH

my question is, are the below commands correct ?

Do I need to run below commands on Active and Passive firewalls separately ?

I am using data port as management ( I do have dedicated m

Resolved! I would like to Restore configuration from 9.1 version 3020 firewall to 10.1 version 440 firewall.

Can I just export the configuration from the 3020 running 9.1.8 and import into the 440 firewall running 10.1.8?  Do I need to downgrade the 440 to 9.1?

Resolved! Country code blocks with IP address exception - is there a way to do this?

I have a block rule for some of the more egregious regions of the internet. Unfortunately, the regions use the source address within the rule on the Palo so I see no way to negate an IP address in a region being blocked.

Is there a way I'm not awar

Resolved! PA -5060 Version: 8.1.24 , All the interfaces flapped simlutanesouly

Hi Team,

We have observed a situation where all the connected interfaces were flapped on the Firewall with the below logs, there is no much conclusive evidence in the tech-support logs, not sure if i am missing the log file which has the reason for

Resolved! Dumb question: Are there cases where a configuration change will take effect prior to committing?

I would like to reconfigure our PA-3260 FW to use its 40G interfaces instead of the 1G interfaces being used in production now. I plan to create one new aggregate ethernet interface made up of subinterfaces that correspond to each of the individual 1

Resolved! Cortex XDR Firewall configuration query.

We have configured the Check Point firewall version (R81.10), but it is not supported for native log ingestion. However, we have checked the official Palo Alto documentation for this link: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-

Resolved! Logging In PAN OS

Hi Team,

>In general, the PA Firewalls are manged by Panorama will log directly to Panorama or do we need any configuration to be made to push the logs to Panorama?

>What is the best way to configure logging for the firewalls managed via Panorama? Fo