I am using the dhcpd on the Palo Alto firewall, and have seen some strange relase patterns, is there away to do a shutdown/start or a restart on the daemon?
New to Palo Alto. Have installed a new PA 1410. This is directly attached to the Ciena 3924 device provided by the ISP. Connecting a laptop to that device allows full internet access. The external interface to access the internet on the Palo Alto is ethernet 1/6. This interface is directly connected to the Ciena 3924. It is part of an outside zo...
Hello, I don't know if this is a normal behavior or not. We have 3 DNS servers. DNS_ADNS_BDNS_CWe are not able to ping or ssh/http to the management interface from the DNS server, if this DNS server is configured as DNS server in the firewall.When we configure DNS_A and DNS_B as a primary and secondary DNS servers in the firewall, we are not abl...
Does anyone know if there is a CLI command to restart, or way to rebuild, the search database? After upgrading to 9.1.16 I am unable to expand search result details for attached objects/policies, instead it hangs with a spinning wheel. Additionally, I can no long view Change Summary before committing changes (nothing happens when pressing the bu...
Hi All,Does Palo Alto supports LDAP running in Linux operating systems? If yes, does the configuration is the same when using active directory?Thanks,Rex
Hi, We are not using redistribution in our FWs. We just have our PAs connected to a UIAgent. So i understand that we dont need to upgrade FWs, just install app&threats version. The point here, that PA releases a python script and its marking like redistribution is enabled. If we run the service command for redistribution its enabled but no...
Several times now Palo Alto sales representatives have accused me of the “fact” of my unresponsiveness/unavailability being the reason for a case taking so long (it was never resolved). This concerns me greatly as I have always tried to respond in a timely fashion and be available when needed. This accusation has been used several times over the...
Hi All, I have ISP provide 4 public IPs can be use. But I can use 1 public ip to outbound traffic only., if i create another SNAT to 2nd public IP, it can't go out to internet. e.g. Interface IP: 20.1.20.20/29 Not work NAT configuration NAT: DMZ NAT : DMZ Source IP 10.1.10.0/24 to DIPP 20.1.20.21-20.1.20.22 APP SNAT: DMZ2 Source IP : 10....
Hi Team, I am unable to push policy from Panorama to one of the firewalls. Getting the Commit Failed due to below reason. . ssl vpn cert file (CERT_GW) processing failed. (Module: rasmgr). global-protect-gateway tunnel interface (tunnel.1) in vsys (vsys1) parsing failed. (Module: rasmgr). client rasmgr phase 1 failure. Commit failed Please h...
Hello Fellows, What can be the best path to upgrade from v10.1.10-h2 to 10.2.7? Can we do it directly ? We have Stand alone 220s and 2 HA pairs of 5220. Thank you Regards Hina
Hi, we have set our PA-440 (PAN-OS 10.1) to block all unknown URLs, which works amazingly well. However, I am seeing more and more URLs getting blocked which are probably for Windows updates that contain an IP address like 151.139.87.98/phf/c/doc/ph/prod5/msdownload/update/software/defu/2023/12/1024/am_delta_patch_1.403.99.0_ccea2ad383853e202858...
Hello, Can anyone help me how to check how many ISC2 CPEs are provided from Palo for the Summit and Conferences (like one we have recently in London Threat Management MicroSummit on 5th Dec-2023? Thank you Regards Hina
Hi Team, I facing the issue to install the device certificate. I have generated the OTP in CSP. and installed it in the panorama-managed firewall. but we are getting the below error ' Failed to fetch the device certificate.TPM public key match failed. Kindly help to resolve the issue. Please note you are posting a public message where comm...
I've recently upgraded my firewall from a PA-5220 pair to a PA-5410 pair. The firewalls were on the same PanOS version (10.2.4-h2) and with the same configuration. This was the original configuration for PBP at the upgrade time:The 5220 wasn't logging any PBP intervention, as you can see here (there's some sporadic intervention by zone protectio...
Hi, I've configured Dual ISP failover using a PBF and everything seems to failover from ISP1 to ISP2 just fine. My issue is after we have failed over to ISP2 and ISP1 comes back online, not all traffic flips back to ISP1. UDP sessions for devices that have a keep alive or heart beat seem to be the most problematic. Currently the SIP/RTP traffi...
