General Topics

PA-445 stability?

Anyone else having issues with PA-445 stability? We're doing our 2nd RMA in less than 6 months on a PA-445 that just randomly restarts. It's on dual independent electrical circuits (with UPSs). After the first RMA it did it again and support said it

natted public ip

Food for Thought - Data Redistribution during HA Failover - User-ID

Hi All, 

I thought I would share something that gave me grief this week. 

Background

• Firewall A and firewall B are in an HA pair. 
• Both firewalls are configured to connect to a User-ID agent sitting on a Windows host within the environment. 
• Firewa

Demo Lab Environments - No Longer Available

I was going to review some Panorama setting options in the demo environment and the demo environment is no longer available. Did Palo Alto decommission these labs and was there any communication about it? If so, can anyone provide the communication?

List of domains to allow for in-flight WiFi

Hi all,

I've been working with a number of customers lately who have been trying to gather a list of in-flight wifi domains that they need to allow as GlobalProtect Enforcer exceptions and I thought I'd share them here. I'd also ask that you please

Evaluation ESXi shutdowned

I testing Evaluation for ESXi  PA-VM-ESX-10.2.5.vm_eval.ova
Successfuly,installed.But, after PA-VM login:   indicated,  I cannot login in entering default  admin / admin.
and,a few minutes later,PaloAlto-VM is shutdowned.  
Even I tried several times,it

To block AI Applications in firewall

Hi,

I want to block a few AI Apps like LLMA, Deepseek application in Paloalto,

But i am not seeing those Apps, Is there any different config for those?

Static default route setup for DHCP client WAN interface

Hello All

I would be much appreciated if you can help with setting up my static default route which I believe is the culprit why I'm not able to route data traffic to internet.

eth1/1:  WAN interface, the interface is set as L3 untagged, configur

Limited CLI Rights

Howdy All!

We are in need of finding a way to give a help desk individual limited access to the CLI to run a Python script to clear addresses from the DoS Blocked-Table. The 2 commands it is running is the

• debug dataplane show dos block-table
• debug

When to use zone type Tunnel

I am setting up a lan to lan tunnel between my palo alto firewall and another palo alto device.  When I look at the documentation online, they suggest I create a new zone and set the type to "layer3".  But I also see a type "Tunnel" in there.  I woul