Hello, Can anyone help me how to check how many ISC2 CPEs are provided from Palo for the Summit and Conferences (like one we have recently in London Threat Management MicroSummit on 5th Dec-2023? Thank you Regards Hina
Hi Team, I facing the issue to install the device certificate. I have generated the OTP in CSP. and installed it in the panorama-managed firewall. but we are getting the below error ' Failed to fetch the device certificate.TPM public key match failed. Kindly help to resolve the issue. Please note you are posting a public message where comm...
I've recently upgraded my firewall from a PA-5220 pair to a PA-5410 pair. The firewalls were on the same PanOS version (10.2.4-h2) and with the same configuration. This was the original configuration for PBP at the upgrade time:The 5220 wasn't logging any PBP intervention, as you can see here (there's some sporadic intervention by zone protectio...
Hi, I've configured Dual ISP failover using a PBF and everything seems to failover from ISP1 to ISP2 just fine. My issue is after we have failed over to ISP2 and ISP1 comes back online, not all traffic flips back to ISP1. UDP sessions for devices that have a keep alive or heart beat seem to be the most problematic. Currently the SIP/RTP traffi...
Hi All, current setup more or less.. |---PAN FW1---| internet -->--- Ext LB---- ---Int LB--------Azure Env |---PAN FW2---| PAN FW1 and PAN FW2 are standalone FWs sitting between an ext and internal Load balancer and managed by panorama un...
Experience applications flow issue, most of the sessions incomplete (i deleted all active sessions with no resolution), reboot, fail-over several times, no luck. I opened a ticket with Tech support for advance packet flow process analysis no resolution until this moment. The odd is, it is one of HA pair experience this issue Active/Passive setup...
I need to migrate an old firewall to a PA-440 and came across an ancient IPsec where they have used DH group 15 for both phase 1 and 2. According to the docs for PanOS 10.2 DH 15 is now supported but the 440 whines about DH15 in phase 1 as I use IKE v1. DH15 in phase 2 seems OK. (Note: The cryptos are from the original setup, will change to more...
Please confirm if the expired PaloAlto licenses can be renewed? If “YES”, Please confirm which of the expired PaloAlto licenses can be renewed?
Hey Team,Has anyone encountered any problems performing the PanOS 11.1.0 Upgrade? I've encountered the following issue after an upgrade, where PanOS (Panorama) would not commit changes, much less push them to our devices. The configd.log file shows the following: 2023-12-09 16:36:16.778 +1100 DG-push(selective): Waiting for DG file to be writt...
Hi Team, Getting Authentication Failed Error Code : -1 after successful MFA SSO. It actually takes the UN and PW, also was able to authenticate with my yubikey, but then it gives this error message. Any fix to this please?
Hi, When I try to open support case error message coming up saying "Problem Category is missing". Although I select the product as PAN-OS while creating the case. BR, Alaa
We are preparing to update this weekend to 10.2.7 to resolve the expiring root certificate issue. We have an HA pair that we want to failover while upgrading as to not disrupt service. While I have the upgrade path from the Palo documentation what I am not sure of is if I can fully upgrade the secondary, failover and then fully upgrade the prima...
Hi, I've been trying to read up on if it is possible to set up what Cisco would call "Twice NAT" on Palo Alto, and while there seems to be a lot out there for really odd fringe cases, I'm struggling to find anything on what I think would be a really common scenario. So hopefully someone can help. We currently have 2 organizations that need t...
Hi Our PA 220 is running 2 eBGP's with 2 CE (WAN) routers. Those 2 CE routers will run eBGP with respective ISP's. We control the routing through Local preference. Routes learned via primary CE 1 has LP of 500 Routes learned via secondary CE 2 has LP of 250 What happened was BGP went down between CE 1 and ISP. BGP didn't go down betwe...
Dear all, I am currently facing paloalto can't block and see hotspot shield app.Our organization do not want to use ssl decryption to block hotspot shield. Any other solutions to block hotsport shield without decryption ??? Thanks.
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
