if want to take Backup of cortex XDR console. can we take if possible and how we can do that.
I've got a process to do this (recover Palo Alto from AWS snapshot) but no way to practice before a disaster. Can anyone confirm I have the important steps covered with respect to networking? 1. Create AMI from snapshot.2. Launch instance using that AMI.3. Ensure it goes in the correct management subnet when doing the above (other stuff like sec...
Hello all, I think I have pretty easy setup, just having issues getting DNS Proxy to work 100%. My goal is to have all users client device DNS primary to point to the firewall and all queries go to the firewall, then the firewall will send all requests to the primary (192.168.10.10) when online and to secondary (192.168.11.10) when primary is do...
I couldn't find any documentation on what to do with this key to make an API call to see all the licensing information. Is this API call on the portal itself? Confused why this is an option on the portal. I have Panorama and a bunch of devices and the licensing team wants to use API to track licenses across all the devices. Thank you.
Hi, We have a PA-3250 which is not connected to the Internet and see lots of logs showing: 'Cloud is not ready. There was no update from the cloud in the last 203656 minutes' Is there a setting on the device we can turn off/disable so we no longer see this alarm? Is this the device trying to talk to the Internet? Thanks
After the recent upgrade of PAN-OS from version 10.1.11 to version 10.2.0 on my Palo Alto 820 device, I am facing significant issues. The appliance is not recognizing administrator credentials after the upgrade is complete.Does anyone have any ideas?
Hi, We have configured GP with CISCO DUO. If i connect in a fisrt moment to GP is successfull. But if i disconnect and connect again the credentials are not being asked. Its like there is a cache that GP is saving my credentials and DFA for a momento. How can i configure that always i connect to GP the password is asked and DFA. If its possibl...
I would highly recommend waiting on deploying 10.1.9 in your enviornment, whether it be large enterprise or SOHO. Recently my company had upgraded a 5250 pair from 10.1.8 to 10.1.9 as we had experienced 2 service impacting bugs. After upgrading 10.1.9 we found that the FW was exhibiting odd behavior where traffic which had specific allow rul...
when we using cli in PAN to search something like "show | match 'string'", can it search string case-insensitively and also is that possible to pipe to another match? I suspect both answers are no, happy to know if there are some workaround.
Hi Support, Good day, i have concern about this system alert DNS Security cloud query timeout. Not sure what to check as if this is normal alert? The dns security cloud connection seems good. attach the screenshot alert message and dns security connection Kindly please advise Thank you
Hi Experts, I'm new to Palo Alto and I've seen documents where File blocking is used in addition with the WildFire analysis. So, any files which is blocked won't be forwarded to WildFire and the action which is set to 'continue/alert' will be continue forwarding. But in my organization I've seen file blocking isn't applied to any security policy...
I have two users using the same pc one on first shift and one on second shift, but the user id is staying the same for both user on the PA. Not having this issue anywhere else any suggestions?
Hi Can I sanity check a NAT rule please. We have a small satellite office with a PA as the firewall. We only have /30 subnet so one IP for the router and one for the IP of the external NIC on the PA. We need to have a connection for a service to a telephone system that comes from external to the telephone. So because of the IP limitation n...
Case:Global Protect VPN is enabled in HO PA220.BO also have PA220, HO and BO connected over site-to-site vpn, If user is connected to HO LAN, internal host detection works and identify it as Internal corporate network. And if user is connected to BO LAN, it just connects to GP VPN even though site to site vpn is active and internal host detectio...
How do I transfer one of my PA-220 license which is already registered to other PA-220 registered as well ? I might be able to do that if I can make one available in spare and then move my already registered PA-220 license to the spare device. Appreciate if you can write down steps and paste some screenshots. Thanks
| Subject | Likes |
|---|---|
| 6 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
