This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! How to upgrade to PAN-OS 12.1 on PA-3400 (not shown in GUI)

Hello Experts, We are currently setting up a PA-3400 series firewall and would like to upgrade PAN-OS to version 12.1. Current version: PAN-OS 11.1.13 We understand that PAN-OS 11.1 may be more stable, but since it is approaching EOS within about a year, we would prefer to deploy 12.1. However, when we check under Device > Software in the G...

Resolved! why PAN‑OS version 12 is often considered not recommended

I would like to ask why PAN‑OS version 12 is often considered not recommended.Is it mainly due to stability concerns during the first year following its release?New PAN-OS 12.1 Release Cycle & 4-Year Support Policy | Palo Alto Networks>During the initial Innovation Phase (the first 12 months), we will deliver two targeted Feature Releases...

Resolved! What PAN‑OS version should we choose as the recommended release today?

Hello everyone, I have a question regarding the recommended PAN‑OS versions. In the past, Palo Alto Networks provided a web page that clearly indicated which PAN‑OS versions were considered recommended or preferred. However, recently it seems that some of those pages are no longer accessible, or at least I can no longer find them through the sam...

Resolved! Support Down??? Unable to Open tickets.

Is anyone else having issues opening support tickets this morning? We are unable to open tickets because it is mandatory to upload a TSF file, but the website does NOT allow uploading a file. It just hangs. We have confirmed that other sites like SharePoint/One Drive have no problem accepting uploads. Even making an empty 1 KB TSF file is n...

birkhojk by • L2 Linker
  • 2633 Views
  • 4 replies
  • 0 Likes

Resolved! What certificate to use for Palo Alto-provided EDL validation

Hello all, I am trying to tide up a bit the EDL configuration in our Panorama. We are using some of the EDLs which Palo Alto provides as optional. Following the official documentation at this link: https://docs.paloaltonetworks.com/network-security/security-policy/administration/objects/external-dynamic-lists/configure-the-firewall-to-access-...

paolopoz by • L1 Bithead
  • 2525 Views
  • 2 replies
  • 0 Likes

GlobalProtect IOS stuck

Good day, After updating to10.2.1 and 6.0.2 GlobalProtect client I could not connect to VPN.The problem was occurred for one endpoint. So I used the second one to connect and update the client. Also the DNS(for split tunnel) was not work. I had to make "virtual change", just to press the OK button and commit. After that DNS was working. Also the...

Pantelis by • L1 Bithead
  • 19673 Views
  • 20 replies
  • 0 Likes

Resolved! Question about my post rejection at VirusTotal Discussions

I tried 3 times to submit a false positive on https://live.paloaltonetworks.com/t5/virustotal/bd-p/VirusTotal_Discussions My post follows the format below: File Hash: <SHA256 hash> Link to Virustotal report for the file: <link> Current VirustTotal Verdict: <verdict> Description: <description> The administrator rejecte...

woeruw by • L2 Linker
  • 2860 Views
  • 2 replies
  • 0 Likes

Resolved! Licensing and install questions for Azure

Hello- I have a few questions regarding installs in Azure tenants regarding products and licensing. My understanding is that we can install either the VM-based model of NGFWs in Azure or the SaaS model, correct? If so, do both/either of those two require Panorama for management? Both VM-based models and SaaS models require licensing? If I h...

beakkenn by • L0 Member
  • 1508 Views
  • 2 replies
  • 0 Likes

Palo Alto Dual ISP, ECMP enables the external interfaces and enables IPSEC VPN tunnels

Palo Alto Dual ISP, ECMP enables the external interfaces and enables IPSEC VPN tunnels. Good afternoon, as always, thanks for the collaboration and support. A few doubts, We currently have an PA configured with ECMP, for outbound to the Internet, with two different ISPs. We plan to configure a Site to Site VPN, with each of the ISP. Here a...

Metgatz by • L4 Transporter
  • 8081 Views
  • 5 replies
  • 0 Likes

Resolved! Dynamic Administrator Authentication based on Active Directory Group rather than named users?

Hello, We have an environment with several adminstrators from a rotating NOC. With the current LDAP method to my understanding we have to manually add the administrator name to the PA administrators list before login will work (e.g. jdoe). We would like to be able to tie it to an AD group (e.g. "Firewall Admins") so anyone who is a member of tha...

jgrote by • L1 Bithead
  • 12567 Views
  • 9 replies
  • 1 Likes

Resolved! Migrating Cisco multi-contexts into one vsys Palo Alto firewall

Hi there, We are looking to migrate a Cisco ASA 5545 with two contexts (Internet and LAN) to a PA-1420. We don't have a multi-vsys license, so everything needs to be merged into a single vsys. We’ll be managing the PA locally (no Panorama) and using the Expedition tool for the migration. Is it possible to merge both ASA contexts into one vsys?...

AK74 by • L2 Linker
  • 1580 Views
  • 2 replies
  • 0 Likes

Google Playstore rule allowed services

Dear Members, Am here a new member, please I wish to know how to allow only the google play store for a specific networks with android devices.If I try to add only google base/play application, other traffics also blocked.Let me know how to allow google play store . Regards, Tiago Marques

tlmarques by • L4 Transporter
  • 921 Views
  • 1 replies
  • 0 Likes

Prisma Access and Microsoft Tenant Restrictions

Hello All . Been wrestling with this for a week . My starting point is to only allow connections to the entra joined domain for e,g, fred.onmicrosoft.com . The rational is DLP - if I go to my browser and attempt to logon to another enterprise - dave.onmicrosoft.com it is blocked. This is not consumer BTW - home tenants are blocked with t...

  • 24467 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks