Upgraded from v9 to v10 and SNMP traffic statistics...

Hi,
Recently we upgraded our VM-100 fw from v9 to v10 and apart from the yellow login wallpaper there was not much visual changes after the transition.  Everything is running as smoothly as before, except an issue with SNMP traffic statistics.

We extr

Not able to access an website via Palo Alto firewall

Hi Folks,

We are recently receiving multiple cases where the devices behind the PA firewall is not able to access certain websites.

In an recent case we had seen for two devices (Device A and Device B in different VLAN's ) located behind Palo Alto fi

Disable interface and kill its sessions by schedule...

Hi,

This is a boarding school situation.  By mutual agreement we close internet access to the dorms from midnight to 6AM.  Several years ago we tried to control the DormsNetZone rules by a schedule.  However as this didn't kill the active sessions it

Communication between 2 network segment

Hello,

I have a PA-220 firewall. There is a normal switch connected on ethernet 1/4. The switch is connected to the equipments of 2 network segments, 10.1.240. * and 192.168.5. * . 

These equipments need to communication now. But I can't change their I

WAF Firewall

Hi Comunity,

Does paloalto has a waf (Web app firewall) solution?

Many thanks.

Script to automate the baseline configuration after initial palo alto deployment

Hello Guys,

I have prepared the "SET" commands which configure the baseline settings. I can able to run the full set command from CLI. I would like to know any options where I can run these command from a Linux machine where the system take the comma

SSL Decryption and Forward decrypted content to WildFire Query

Hi Team,

I have below 2 tasks which needs to be closed from PaloAlto Level. Appreciate your quick response.

Task 1

"1.Configure SSL Forward Proxy for all traffic destined to the Internet"

As per the Best Practices we have to enable ssl Decrypti

Global Protect is constantly causing network errors.

Since November I have been experiencing issues with Global Protect VPN not connecting properly.  Global Protect either causes a slow down in my internet or my local internet to go out with a bunch of "DNS error" or "Network Change" error or "Network

Proxy SG to Palo alto policy migration

Hi,

Is there any automation tool through which we can migrate all our proxy SG policy rule, object and object group to Palo alto. Or else if there is any alternate option then please let me know.

Include or Exclude Subnetworks for User Mapping

I would like to know when to use Include or Exclude Subnetworks for User Mapping. in other words I would like to know whether it is used when we use agentless user id or external user id agent or in both cases?

group-based policies for RADIUS authenticated users.

Dear community,

For users who authenticate via RADIUS on Active Directory, is there any possibility to fetch the groups for those RADIUS users so that group-based policies can be created in the firewall? 

Thank you!

Sort feature would be helpful

I'm fairly new to Palo Alto gear and wanted to submit a suggestion about adding a sort capability to the information presented in the various tabs/pages. Just a few examples on the benefits of being able to sort: Trying to find that one rule where yo